CVE-2009-2762

HighCVSS 7.5/10Last modified Jun 16, 2026

Description

wp-login.php in WordPress 2.8.3 and earlier allows remote attackers to force a password reset for the first user in the database, possibly the administrator, via a key[] array variable in a resetpass (aka rp) action, which bypasses a check that assumes that $key is not an array.

Metrics

CVSS 2.0 7.5/10AV:N/AC:L/Au:N/C:P/I:P/A:P

Weakness enumeration

CWE-255

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://archives.neohapsis.com/archives/fulldisclosure/2009-08/0114.htmlBroken Link
http://core.trac.wordpress.org/changeset/11798Vendor Advisory
http://secunia.com/advisories/36237Third Party Advisory
http://wordpress.org/development/2009/08/2-8-4-security-release/Patch, Vendor Advisory
http://www.exploit-db.com/exploits/9410Exploit, Third Party Advisory
http://www.securityfocus.com/bid/36014Third Party Advisory, VDB Entry
http://www.securitytracker.com/id?1022707Third Party Advisory, VDB Entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/52382Third Party Advisory, VDB Entry
http://archives.neohapsis.com/archives/fulldisclosure/2009-08/0114.htmlBroken Link
http://core.trac.wordpress.org/changeset/11798Vendor Advisory
http://secunia.com/advisories/36237Third Party Advisory
http://wordpress.org/development/2009/08/2-8-4-security-release/Patch, Vendor Advisory
http://www.exploit-db.com/exploits/9410Exploit, Third Party Advisory
http://www.securityfocus.com/bid/36014Third Party Advisory, VDB Entry
http://www.securitytracker.com/id?1022707Third Party Advisory, VDB Entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/52382Third Party Advisory, VDB Entry

Timeline

Published: Aug 13, 2009
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2009

CVE-2009-27645.0Microsoft Internet Explorer 8.0.7100.0 on Windows 7 RC on the x64 platform allows remote attackers to cause a denial of service (application CVE-2009-27658.3httpd.c in httpd in the management GUI in DD-WRT 24 sp1, and other versions before build 12533, allows remote attackers to execute arbitrary CVE-2009-27667.5httpd.c in httpd in the management GUI in DD-WRT 24 sp1 does not require administrative authentication for programs under cgi-bin/, which al CVE-2009-27677.2The init_posix_timers function in kernel/posix-timers.c in the Linux kernel before 2.6.31-rc6 allows local users to cause a denial of servic CVE-2009-27687.8The load_flat_shared_library function in fs/binfmt_flat.c in the flat subsystem in the Linux kernel before 2.6.31-rc6 allows local users to CVE-2009-27696.8PHP remote file inclusion vulnerability in include/timesheet.php in Ultrize TimeSheet 1.2.2, when register_globals is enabled, allows remote CVE-2009-27707.5PowerUpload 2.4 allows remote attackers to bypass authentication and gain administrative access via a MIME encoded value of admin for the my CVE-2009-27714.3Cross-site scripting (XSS) vulnerability in Free Arcade Script 1.3 allows remote attackers to inject arbitrary web script or HTML via the ke CVE-2009-27724.3Multiple cross-site scripting (XSS) vulnerabilities in PG Roommate Finder Solution allow remote attackers to inject arbitrary web script or CVE-2009-27737.5PHP remote file inclusion vulnerability in home.php in PHP Paid 4 Mail Script allows remote attackers to execute arbitrary PHP code via a UR CVE-2009-27747.5SQL injection vulnerability in paidbanner.php in PHP Paid 4 Mail Script allows remote attackers to execute arbitrary SQL commands via the ID CVE-2009-27757.5SQL injection vulnerability in linkout.php in PHPArcadeScript (PHP Arcade Script) 4.0 allows remote attackers to execute arbitrary SQL comma