ID de Prueba:	1.3.6.1.4.1.25623.1.0.100505
Categoría:	Web application abuses
Título:	WordPress Trashed Posts Information Disclosure Vulnerability
Resumen:	WordPress is prone to an information disclosure vulnerability because; it fails to properly restrict access to trashed posts.
Descripción:	Summary: WordPress is prone to an information disclosure vulnerability because it fails to properly restrict access to trashed posts. Vulnerability Impact: An attacker can exploit this vulnerability to view other authors' trashed posts, which may aid in further attacks. Affected Software/OS: Versions prior to WordPress 2.9.2 are vulnerable. Solution: Updates are available. Please see the references for more information. CVSS Score: 4.0 CVSS Vector: AV:N/AC:L/Au:S/C:P/I:N/A:N
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2010-0682 http://lists.fedoraproject.org/pipermail/package-announce/2011-January/052932.html http://lists.fedoraproject.org/pipermail/package-announce/2011-January/052917.html http://hakre.wordpress.com/2010/02/16/the-short-memory-of-wordpress-org-security/ http://tmacuk.co.uk/?p=180 http://www.osvdb.org/62330 http://secunia.com/advisories/38592 http://secunia.com/advisories/42871
Copyright	Copyright (C) 2010 Greenbone AG

Esta es sólo una de 146377 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.