Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2007-6013
9.8
CRITICALCVSS v3
Published
November 19, 2007
CVSS v2
6.8 MEDIUM
Affected
1 project
Assigned by
MITRE
Severity scale
010
Description
Wordpress 1.5 through 2.3.1 uses cookie values based on the MD5 hash of a password MD5 hash, which allows attackers to bypass authentication by obtaining the MD5 hash from the user database, then generating the authentication cookie from that hash.
WordPress/WordPress
GitHubWordPress, Git-ified. This repository is just a mirror of the WordPress subversion repository. Please do not send pull requests. Submit pull requests to https://github.com/WordPress/wordpress-develop and patches to https://core.trac.wordpress.org/ instead.
GitHubWordPress, Git-ified. This repository is just a mirror of the WordPress subversion repository. Please do not send pull requests. Submit pull requests to https://github.com/WordPress/wordpress-develop and patches to https://core.trac.wordpress.org/ instead.= 2.0.11, = 2.0, = 2.1.1, = 2.2.3, = 2.1, = 1.5-strayhorn, = 2.0.6, = 2.0.1, = 2.0.4, = 1.5, = 2.0.10, = 1.5.1.2, = 1.5.1.3, = 1.5.2, = 2.0.7, = 2.2, = 2.2.1, = 2.3, = 2.3.1, = 1.5.1, = 1.5.1.1, = 2.0.5, = 2.1.2, = 2.1.3, = 2.0.8, = 2.0.9, = 2.2.2, >= 1.5, <= 2.3.1NVD