SecuritySpace - CVE-2009-2854

Vulnerability Search		Search 324607 CVE descriptions and 145615 test descriptions, access 10,000+ cross references.
	Tests CVE All

CVE ID: CVE-2009-2854

Description: Wordpress before 2.8.3 does not check capabilities for certain actions, which allows remote attackers to make unauthorized edits or additions via a direct request to (1) edit-comments.php, (2) edit- pages.php, (3) edit.php, (4) edit-category-form.php, (5) edit-link- category-form.php, (6) edit-tag-form.php, (7) export.php, (8) import.php, or (9) link-add.php in wp-admin/.

Test IDs: 1.3.6.1.4.1.25623.1.0.64754 1.3.6.1.4.1.25623.1.0.64759

Cross References: Common Vulnerability Exposure (CVE) ID: CVE-2009-2854
Debian Security Information: DSA-1871 (Google Search)
http://www.debian.org/security/2009/dsa-1871
http://www.openwall.com/lists/oss-security/2009/08/04/5

CVE ID:	CVE-2009-2854
Description:	Wordpress before 2.8.3 does not check capabilities for certain actions, which allows remote attackers to make unauthorized edits or additions via a direct request to (1) edit-comments.php, (2) edit- pages.php, (3) edit.php, (4) edit-category-form.php, (5) edit-link- category-form.php, (6) edit-tag-form.php, (7) export.php, (8) import.php, or (9) link-add.php in wp-admin/.
Test IDs:	1.3.6.1.4.1.25623.1.0.64754 1.3.6.1.4.1.25623.1.0.64759
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2009-2854 Debian Security Information: DSA-1871 (Google Search) http://www.debian.org/security/2009/dsa-1871 http://www.openwall.com/lists/oss-security/2009/08/04/5