CVE-2005-2109 - Secunia Advisories - Vulnerability Intelligence

CVE Reference: CVE-2005-2109
NOTE: The text on this page is written by CVE MITRE and reflects neither the opinions of Secunia or the results of our research. All data on this page is written and maintained by CVE MITRE.

Original Page at CVE MITRE: CVE-2005-2109

Description: wp-login.php in WordPress 1.5.1.2 and earlier allows remote attackers to change the content of the forgotten password e-mail message via the message variable, which is not initialized before use.

CVE Status: Candidate

References: SAID Secunia Advisory: SA15831 MISC http://www.gulftech.org/?node=research&article_id=00085-06282005 BUGTRAQ http://marc.theaimsgroup.com/?l=bugtraq&m=112006967221438&w=2

Return to the previous page.