QwikSec

Security Database

CVE

CWE

Training

CVE-2008-3747

Published: Aug 27, 2008

Modified: Aug 7, 2024

PUBLISHED

Description

The (1) get_edit_post_link and (2) get_edit_comment_link functions in wp-includes/link-template.php in WordPress before 2.6.1 do not force SSL communication in the intended situations, which might allow remote attackers to gain administrative access by sniffing the network for a cookie.

Vendor	Product	Versions
n/a	n/a	affected `n/a`

References

http://trac.wordpress.org/ticket/7359

x_refsource_CONFIRM

[oss-security] 20080820 Re: wordpress 2.6.1

mailing-list

x_refsource_MLIST

wordpress-geteditpostlink-info-disclosure(44569)

vdb-entry

x_refsource_XF

vdb-entry

x_refsource_BID

[oss-security] 20080819 wordpress 2.6.1

mailing-list

x_refsource_MLIST

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.