CVE-2008-3747: High severity wordpress vulnerability
The (1) geteditpostlink and (2) geteditcommentlink functions in wp-includes/link-template.php in WordPress before 2.6.1 do not force SSL communication in the intended situations, which might allow remote attackers to gain administrative access by sniffing the network for a cookie.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2008-3747?
CVE-2008-3747 is rated as important, as it can allow remote attackers to gain administrative access through unsecured SSL communication.
How do I fix CVE-2008-3747?
To fix CVE-2008-3747, upgrade your WordPress installation to version 2.6.1 or later to ensure SSL communication is enforced.
Which versions are affected by CVE-2008-3747?
CVE-2008-3747 affects WordPress versions prior to 2.6.1, including 2.0.1, 2.0.11, and multiple other versions up to 2.3.
How can CVE-2008-3747 be exploited?
CVE-2008-3747 can be exploited by attackers sniffing the network for unencrypted cookies, potentially leading to unauthorized access.
What functions are related to CVE-2008-3747?
CVE-2008-3747 relates specifically to the functions get_edit_post_link and get_edit_comment_link in WordPress.