CVE-2010-5293 | BDVDB-2026-59496 Detail

Description#

wp-includes/comment.php in WordPress before 3.0.2 does not properly whitelist trackbacks and pingbacks in the blogroll, which allows remote attackers to bypass intended spam restrictions via a crafted URL, as demonstrated by a URL that triggers a substring match.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://core.trac.wordpress.org/ticket/13887
https://core.trac.wordpress.org/changeset/16637
http://codex.wordpress.org/Version_3.0.2

Exploit#

No public exploit known

History#

Version 12014-01-21Record published in the CVE List.
Version 22024-09-16Most recent update recorded in the CVE List.