6.5
CVSSv2

CVE-2007-1599

Published: 22/03/2007 Updated: 16/10/2018
CVSS v2 Base Score: 6.5 | Impact Score: 6.4 | Exploitability Score: 8
VMScore: 578
Vector: AV:N/AC:L/Au:S/C:P/I:P/A:P

Vulnerability Summary

wp-login.php in WordPress allows remote malicious users to redirect authenticated users to other websites and potentially obtain sensitive information via the redirect_to parameter.

Vulnerable Product Search on Vulmon Subscribe to Product

wordpress wordpress 2.1.2

Vendor Advisories

Debian Bug report logs - #437085 CVE-2007-1599: wp-loginphp allows remote attackers to redirect authenticated users to other websites Package: wordpress; Maintainer for wordpress is Craig Small <csmall@debianorg>; Source for wordpress is src:wordpress (PTS, buildd, popcon) Reported by: Steffen Joeris <steffenjoeris@sko ...