Lucene search

MitreCVE-2009-2853

HistoryAug 18, 2009 - 9:00 p.m.

CVE-2009-2853

2009-08-1821:00:00

CWE-264

mitre

web.nvd.nist.gov

cve-2009-2853

wordpress

2.8.3

privilege escalation

nvd

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

AI Score

6.7

Confidence

Low

EPSS

0.014

Percentile

86.4%

JSON

Wordpress before 2.8.3 allows remote attackers to gain privileges via a direct request to (1) admin-footer.php, (2) edit-category-form.php, (3) edit-form-advanced.php, (4) edit-form-comment.php, (5) edit-link-category-form.php, (6) edit-link-form.php, (7) edit-page-form.php, and (8) edit-tag-form.php in wp-admin/.

Affected configurations

Nvd

Node

wordpresswordpressMatch0.71

wordpresswordpressMatch0.71beta

wordpresswordpressMatch0.71beta_3

wordpresswordpressMatch0.72

wordpresswordpressMatch0.72beta_1

wordpresswordpressMatch0.72beta_2

wordpresswordpressMatch0.72rc1

wordpresswordpressMatch0.711

wordpresswordpressMatch1.0

wordpresswordpressMatch1.0.1miles

wordpresswordpressMatch1.0.1rc1

wordpresswordpressMatch1.2

wordpresswordpressMatch1.2beta

wordpresswordpressMatch1.2rc1

wordpresswordpressMatch1.2.1

wordpresswordpressMatch1.2.2

wordpresswordpressMatch1.5

wordpresswordpressMatch1.5.1

wordpresswordpressMatch1.5.1.3

wordpresswordpressMatch1.5.2

wordpresswordpressMatch2.0

wordpresswordpressMatch2.0.1

wordpresswordpressMatch2.0.2

wordpresswordpressMatch2.0.3

wordpresswordpressMatch2.0.4

wordpresswordpressMatch2.0.5ronan

wordpresswordpressMatch2.0.6

wordpresswordpressMatch2.0.7

wordpresswordpressMatch2.0.9

wordpresswordpressMatch2.0.10

wordpresswordpressMatch2.0.11

wordpresswordpressMatch2.1ella

wordpresswordpressMatch2.1.1

wordpresswordpressMatch2.1.1dangerous

wordpresswordpressMatch2.1.2

wordpresswordpressMatch2.1.3

wordpresswordpressMatch2.2

wordpresswordpressMatch2.2.1

wordpresswordpressMatch2.2.2

wordpresswordpressMatch2.2.3

wordpresswordpressMatch2.3

wordpresswordpressMatch2.3beta3

wordpresswordpressMatch2.3rc1

wordpresswordpressMatch2.3.1

wordpresswordpressMatch2.3.1rc1

wordpresswordpressMatch2.3.2

wordpresswordpressMatch2.5

wordpresswordpressMatch2.5.1

wordpresswordpressMatch2.6

wordpresswordpressMatch2.6.1

wordpresswordpressMatch2.6.2

wordpresswordpressMatch2.6.3

wordpresswordpressMatch2.7coltrane

wordpresswordpressMatch2.7.1

wordpresswordpressMatch2.8

wordpresswordpressMatch2.8.1

wordpresswordpressMatch2.8.2

VendorProductVersionCPE
wordpresswordpress0.71cpe:2.3:a:wordpress:wordpress:0.71:*:*:*:*:*:*:*
wordpresswordpress0.71cpe:2.3:a:wordpress:wordpress:0.71:beta:*:*:*:*:*:*
wordpresswordpress0.71cpe:2.3:a:wordpress:wordpress:0.71:beta_3:*:*:*:*:*:*
wordpresswordpress0.72cpe:2.3:a:wordpress:wordpress:0.72:*:*:*:*:*:*:*
wordpresswordpress0.72cpe:2.3:a:wordpress:wordpress:0.72:beta_1:*:*:*:*:*:*
wordpresswordpress0.72cpe:2.3:a:wordpress:wordpress:0.72:beta_2:*:*:*:*:*:*
wordpresswordpress0.72cpe:2.3:a:wordpress:wordpress:0.72:rc1:*:*:*:*:*:*
wordpresswordpress0.711cpe:2.3:a:wordpress:wordpress:0.711:*:*:*:*:*:*:*
wordpresswordpress1.0cpe:2.3:a:wordpress:wordpress:1.0:*:*:*:*:*:*:*
wordpresswordpress1.0.1cpe:2.3:a:wordpress:wordpress:1.0.1:miles:*:*:*:*:*:*

Vendor	Product	Version	CPE
wordpress	wordpress	0.71	cpe:2.3:a:wordpress:wordpress:0.71:::::::*
wordpress	wordpress	0.71	cpe:2.3:a:wordpress:wordpress:0.71:beta::::::
wordpress	wordpress	0.71	cpe:2.3:a:wordpress:wordpress:0.71:beta_3::::::
wordpress	wordpress	0.72	cpe:2.3:a:wordpress:wordpress:0.72:::::::*
wordpress	wordpress	0.72	cpe:2.3:a:wordpress:wordpress:0.72:beta_1::::::
wordpress	wordpress	0.72	cpe:2.3:a:wordpress:wordpress:0.72:beta_2::::::
wordpress	wordpress	0.72	cpe:2.3:a:wordpress:wordpress:0.72:rc1::::::
wordpress	wordpress	0.711	cpe:2.3:a:wordpress:wordpress:0.711:::::::*
wordpress	wordpress	1.0	cpe:2.3:a:wordpress:wordpress:1.0:::::::*
wordpress	wordpress	1.0.1	cpe:2.3:a:wordpress:wordpress:1.0.1:miles::::::