Full Disclosure mailing list archives
Re: Wordpress Cookie Authentication Vulnerability
From: "XSS Worm XSS Security Information Portal" <cross-site-scripting-security () xssworm com>
Date: Wed, 21 Nov 2007 03:48:06 +1100
"A remote attacker, with read access to the password database can gain administrator rights." This also applies to many other blog software and also every system with a password database. -- Francesco Vaj [CISSP - GIAC] Senior Content Manipulation Consultant mailto:vaj () nospam xssworm com aim: XSS Cross Site XSS Worm: Cross Site Scripting Attacks Wordpress Blog Password Hash Replay Information Portal (tm) 2007 http://www.XSSworm.com/ -- "Vaj, bella vaj."
_______________________________________________ Full-Disclosure - We believe in it. Charter: http://lists.grok.org.uk/full-disclosure-charter.html Hosted and sponsored by Secunia - http://secunia.com/
Current thread:
- Wordpress Cookie Authentication Vulnerability Steven J. Murdoch (Nov 19)
- Re: Wordpress Cookie Authentication Vulnerability XSS Worm XSS Security Information Portal (Nov 20)
- Re: Wordpress Cookie Authentication Vulnerability Steven Murdoch (Nov 20)
- Re: Wordpress Cookie Authentication Vulnerability Stefan Esser (Nov 20)
- Re: Wordpress Cookie Authentication Vulnerability Steven J. Murdoch (Nov 20)
- <Possible follow-ups>
- Re: Wordpress Cookie Authentication Vulnerability Juha-Matti Laurio (Nov 20)
- Re: Wordpress Cookie Authentication Vulnerability Steven Adair (Nov 20)
- Re: Wordpress Cookie Authentication Vulnerability James Matthews (Nov 20)
- Re: Wordpress Cookie Authentication Vulnerability Eduardo Tongson (Nov 20)
- Re: Wordpress Cookie Authentication Vulnerability Valdis . Kletnieks (Nov 20)
- Re: Wordpress Cookie Authentication Vulnerability Paul Schmehl (Nov 20)
- Re: Wordpress Cookie Authentication Vulnerability Steven Adair (Nov 20)
- Re: Wordpress Cookie Authentication Vulnerability XSS Worm XSS Security Information Portal (Nov 20)
- Re: Wordpress Cookie Authentication Vulnerability Adrian P (Nov 21)