1. CVE-Search
  2. CVE-2007-3639
ID CVE-2007-3639
Summary WordPress before 2.2.2 allows remote attackers to redirect visitors to other websites and potentially obtain sensitive information via (1) the _wp_http_referer parameter to wp-pass.php, related to the wp_get_referer function in wp-includes/functions.php; and possibly other vectors related to (2) wp-includes/pluggable.php and (3) the wp_nonce_ays function in wp-includes/functions.php.
References
Vulnerable Configurations
  • cpe:2.3:a:wordpress:wordpress:-:*:*:*:*:*:*:*
    cpe:2.3:a:wordpress:wordpress:-:*:*:*:*:*:*:*
  • cpe:2.3:a:wordpress:wordpress:0.71:*:*:*:*:*:*:*
    cpe:2.3:a:wordpress:wordpress:0.71:*:*:*:*:*:*:*
  • cpe:2.3:a:wordpress:wordpress:0.71:-:*:*:*:*:*:*
    cpe:2.3:a:wordpress:wordpress:0.71:-:*:*:*:*:*:*
  • cpe:2.3:a:wordpress:wordpress:0.71:beta:*:*:*:*:*:*
    cpe:2.3:a:wordpress:wordpress:0.71:beta:*:*:*:*:*:*
  • cpe:2.3:a:wordpress:wordpress:0.71:beta3:*:*:*:*:*:*
    cpe:2.3:a:wordpress:wordpress:0.71:beta3:*:*:*:*:*:*
  • cpe:2.3:a:wordpress:wordpress:0.72:beta1:*:*:*:*:*:*
    cpe:2.3:a:wordpress:wordpress:0.72:beta1:*:*:*:*:*:*
  • cpe:2.3:a:wordpress:wordpress:0.72:beta2:*:*:*:*:*:*
    cpe:2.3:a:wordpress:wordpress:0.72:beta2:*:*:*:*:*:*
  • cpe:2.3:a:wordpress:wordpress:0.72:rc1:*:*:*:*:*:*
    cpe:2.3:a:wordpress:wordpress:0.72:rc1:*:*:*:*:*:*
  • cpe:2.3:a:wordpress:wordpress:0.711:*:*:*:*:*:*:*
    cpe:2.3:a:wordpress:wordpress:0.711:*:*:*:*:*:*:*
  • cpe:2.3:a:wordpress:wordpress:1.0:*:*:*:*:*:*:*
    cpe:2.3:a:wordpress:wordpress:1.0:*:*:*:*:*:*:*
  • cpe:2.3:a:wordpress:wordpress:1.0:-:*:*:*:*:*:*
    cpe:2.3:a:wordpress:wordpress:1.0:-:*:*:*:*:*:*
  • cpe:2.3:a:wordpress:wordpress:1.0:rc1:*:*:*:*:*:*
    cpe:2.3:a:wordpress:wordpress:1.0:rc1:*:*:*:*:*:*
  • cpe:2.3:a:wordpress:wordpress:1.0.1:*:*:*:*:*:*:*
    cpe:2.3:a:wordpress:wordpress:1.0.1:*:*:*:*:*:*:*
  • cpe:2.3:a:wordpress:wordpress:1.0.1:-:*:*:*:*:*:*
    cpe:2.3:a:wordpress:wordpress:1.0.1:-:*:*:*:*:*:*
  • cpe:2.3:a:wordpress:wordpress:1.0.1:rc1:*:*:*:*:*:*
    cpe:2.3:a:wordpress:wordpress:1.0.1:rc1:*:*:*:*:*:*
  • cpe:2.3:a:wordpress:wordpress:1.0.2:*:*:*:*:*:*:*
    cpe:2.3:a:wordpress:wordpress:1.0.2:*:*:*:*:*:*:*
  • cpe:2.3:a:wordpress:wordpress:1.1.1:*:*:*:*:*:*:*
    cpe:2.3:a:wordpress:wordpress:1.1.1:*:*:*:*:*:*:*
  • cpe:2.3:a:wordpress:wordpress:1.2:*:*:*:*:*:*:*
    cpe:2.3:a:wordpress:wordpress:1.2:*:*:*:*:*:*:*
  • cpe:2.3:a:wordpress:wordpress:1.2:-:*:*:*:*:*:*
    cpe:2.3:a:wordpress:wordpress:1.2:-:*:*:*:*:*:*
  • cpe:2.3:a:wordpress:wordpress:1.2:beta:*:*:*:*:*:*
    cpe:2.3:a:wordpress:wordpress:1.2:beta:*:*:*:*:*:*
  • cpe:2.3:a:wordpress:wordpress:1.2:rc1:*:*:*:*:*:*
    cpe:2.3:a:wordpress:wordpress:1.2:rc1:*:*:*:*:*:*
  • cpe:2.3:a:wordpress:wordpress:1.2:rc2:*:*:*:*:*:*
    cpe:2.3:a:wordpress:wordpress:1.2:rc2:*:*:*:*:*:*
  • cpe:2.3:a:wordpress:wordpress:1.2.1:*:*:*:*:*:*:*
    cpe:2.3:a:wordpress:wordpress:1.2.1:*:*:*:*:*:*:*
  • cpe:2.3:a:wordpress:wordpress:1.2.2:*:*:*:*:*:*:*
    cpe:2.3:a:wordpress:wordpress:1.2.2:*:*:*:*:*:*:*
  • cpe:2.3:a:wordpress:wordpress:1.2.3:*:*:*:*:*:*:*
    cpe:2.3:a:wordpress:wordpress:1.2.3:*:*:*:*:*:*:*
  • cpe:2.3:a:wordpress:wordpress:1.2.4:*:*:*:*:*:*:*
    cpe:2.3:a:wordpress:wordpress:1.2.4:*:*:*:*:*:*:*
  • cpe:2.3:a:wordpress:wordpress:1.2.5:*:*:*:*:*:*:*
    cpe:2.3:a:wordpress:wordpress:1.2.5:*:*:*:*:*:*:*
  • cpe:2.3:a:wordpress:wordpress:1.2.5:a:*:*:*:*:*:*
    cpe:2.3:a:wordpress:wordpress:1.2.5:a:*:*:*:*:*:*
  • cpe:2.3:a:wordpress:wordpress:1.3:*:*:*:*:*:*:*
    cpe:2.3:a:wordpress:wordpress:1.3:*:*:*:*:*:*:*
  • cpe:2.3:a:wordpress:wordpress:1.3.2:*:*:*:*:*:*:*
    cpe:2.3:a:wordpress:wordpress:1.3.2:*:*:*:*:*:*:*
  • cpe:2.3:a:wordpress:wordpress:1.3.3:*:*:*:*:*:*:*
    cpe:2.3:a:wordpress:wordpress:1.3.3:*:*:*:*:*:*:*
  • cpe:2.3:a:wordpress:wordpress:1.5:*:*:*:*:*:*:*
    cpe:2.3:a:wordpress:wordpress:1.5:*:*:*:*:*:*:*
  • cpe:2.3:a:wordpress:wordpress:1.5.1:*:*:*:*:*:*:*
    cpe:2.3:a:wordpress:wordpress:1.5.1:*:*:*:*:*:*:*
  • cpe:2.3:a:wordpress:wordpress:1.5.1.1:*:*:*:*:*:*:*
    cpe:2.3:a:wordpress:wordpress:1.5.1.1:*:*:*:*:*:*:*
  • cpe:2.3:a:wordpress:wordpress:1.5.1.2:*:*:*:*:*:*:*
    cpe:2.3:a:wordpress:wordpress:1.5.1.2:*:*:*:*:*:*:*
  • cpe:2.3:a:wordpress:wordpress:1.5.1.3:*:*:*:*:*:*:*
    cpe:2.3:a:wordpress:wordpress:1.5.1.3:*:*:*:*:*:*:*
  • cpe:2.3:a:wordpress:wordpress:1.5.2:*:*:*:*:*:*:*
    cpe:2.3:a:wordpress:wordpress:1.5.2:*:*:*:*:*:*:*
  • cpe:2.3:a:wordpress:wordpress:1.6.2:*:*:*:*:*:*:*
    cpe:2.3:a:wordpress:wordpress:1.6.2:*:*:*:*:*:*:*
  • cpe:2.3:a:wordpress:wordpress:2.0:*:*:*:*:*:*:*
    cpe:2.3:a:wordpress:wordpress:2.0:*:*:*:*:*:*:*
  • cpe:2.3:a:wordpress:wordpress:2.0:-:*:*:*:*:*:*
    cpe:2.3:a:wordpress:wordpress:2.0:-:*:*:*:*:*:*
  • cpe:2.3:a:wordpress:wordpress:2.0:rc1:*:*:*:*:*:*
    cpe:2.3:a:wordpress:wordpress:2.0:rc1:*:*:*:*:*:*
  • cpe:2.3:a:wordpress:wordpress:2.0.1:*:*:*:*:*:*:*
    cpe:2.3:a:wordpress:wordpress:2.0.1:*:*:*:*:*:*:*
  • cpe:2.3:a:wordpress:wordpress:2.0.1:-:*:*:*:*:*:*
    cpe:2.3:a:wordpress:wordpress:2.0.1:-:*:*:*:*:*:*
  • cpe:2.3:a:wordpress:wordpress:2.0.1:rc1:*:*:*:*:*:*
    cpe:2.3:a:wordpress:wordpress:2.0.1:rc1:*:*:*:*:*:*
  • cpe:2.3:a:wordpress:wordpress:2.0.2:*:*:*:*:*:*:*
    cpe:2.3:a:wordpress:wordpress:2.0.2:*:*:*:*:*:*:*
  • cpe:2.3:a:wordpress:wordpress:2.0.3:*:*:*:*:*:*:*
    cpe:2.3:a:wordpress:wordpress:2.0.3:*:*:*:*:*:*:*
  • cpe:2.3:a:wordpress:wordpress:2.0.3:-:*:*:*:*:*:*
    cpe:2.3:a:wordpress:wordpress:2.0.3:-:*:*:*:*:*:*
  • cpe:2.3:a:wordpress:wordpress:2.0.4:*:*:*:*:*:*:*
    cpe:2.3:a:wordpress:wordpress:2.0.4:*:*:*:*:*:*:*
  • cpe:2.3:a:wordpress:wordpress:2.0.5:*:*:*:*:*:*:*
    cpe:2.3:a:wordpress:wordpress:2.0.5:*:*:*:*:*:*:*
  • cpe:2.3:a:wordpress:wordpress:2.0.5:-:*:*:*:*:*:*
    cpe:2.3:a:wordpress:wordpress:2.0.5:-:*:*:*:*:*:*
  • cpe:2.3:a:wordpress:wordpress:2.0.5:beta1:*:*:*:*:*:*
    cpe:2.3:a:wordpress:wordpress:2.0.5:beta1:*:*:*:*:*:*
  • cpe:2.3:a:wordpress:wordpress:2.0.5:rc1:*:*:*:*:*:*
    cpe:2.3:a:wordpress:wordpress:2.0.5:rc1:*:*:*:*:*:*
  • cpe:2.3:a:wordpress:wordpress:2.0.6:*:*:*:*:*:*:*
    cpe:2.3:a:wordpress:wordpress:2.0.6:*:*:*:*:*:*:*
  • cpe:2.3:a:wordpress:wordpress:2.0.6:-:*:*:*:*:*:*
    cpe:2.3:a:wordpress:wordpress:2.0.6:-:*:*:*:*:*:*
  • cpe:2.3:a:wordpress:wordpress:2.0.6:beta1:*:*:*:*:*:*
    cpe:2.3:a:wordpress:wordpress:2.0.6:beta1:*:*:*:*:*:*
  • cpe:2.3:a:wordpress:wordpress:2.0.6:rc1:*:*:*:*:*:*
    cpe:2.3:a:wordpress:wordpress:2.0.6:rc1:*:*:*:*:*:*
  • cpe:2.3:a:wordpress:wordpress:2.0.6:rc2:*:*:*:*:*:*
    cpe:2.3:a:wordpress:wordpress:2.0.6:rc2:*:*:*:*:*:*
  • cpe:2.3:a:wordpress:wordpress:2.0.7:*:*:*:*:*:*:*
    cpe:2.3:a:wordpress:wordpress:2.0.7:*:*:*:*:*:*:*
  • cpe:2.3:a:wordpress:wordpress:2.0.7:-:*:*:*:*:*:*
    cpe:2.3:a:wordpress:wordpress:2.0.7:-:*:*:*:*:*:*
  • cpe:2.3:a:wordpress:wordpress:2.0.7:rc1:*:*:*:*:*:*
    cpe:2.3:a:wordpress:wordpress:2.0.7:rc1:*:*:*:*:*:*
  • cpe:2.3:a:wordpress:wordpress:2.0.7:rc2:*:*:*:*:*:*
    cpe:2.3:a:wordpress:wordpress:2.0.7:rc2:*:*:*:*:*:*
  • cpe:2.3:a:wordpress:wordpress:2.0.8:*:*:*:*:*:*:*
    cpe:2.3:a:wordpress:wordpress:2.0.8:*:*:*:*:*:*:*
  • cpe:2.3:a:wordpress:wordpress:2.0.8:-:*:*:*:*:*:*
    cpe:2.3:a:wordpress:wordpress:2.0.8:-:*:*:*:*:*:*
  • cpe:2.3:a:wordpress:wordpress:2.0.8:rc1:*:*:*:*:*:*
    cpe:2.3:a:wordpress:wordpress:2.0.8:rc1:*:*:*:*:*:*
  • cpe:2.3:a:wordpress:wordpress:2.0.9:*:*:*:*:*:*:*
    cpe:2.3:a:wordpress:wordpress:2.0.9:*:*:*:*:*:*:*
  • cpe:2.3:a:wordpress:wordpress:2.0.9:-:*:*:*:*:*:*
    cpe:2.3:a:wordpress:wordpress:2.0.9:-:*:*:*:*:*:*
  • cpe:2.3:a:wordpress:wordpress:2.0.9:beta1:*:*:*:*:*:*
    cpe:2.3:a:wordpress:wordpress:2.0.9:beta1:*:*:*:*:*:*
  • cpe:2.3:a:wordpress:wordpress:2.0.9:rc1:*:*:*:*:*:*
    cpe:2.3:a:wordpress:wordpress:2.0.9:rc1:*:*:*:*:*:*
  • cpe:2.3:a:wordpress:wordpress:2.0.10:*:*:*:*:*:*:*
    cpe:2.3:a:wordpress:wordpress:2.0.10:*:*:*:*:*:*:*
  • cpe:2.3:a:wordpress:wordpress:2.0.10:-:*:*:*:*:*:*
    cpe:2.3:a:wordpress:wordpress:2.0.10:-:*:*:*:*:*:*
  • cpe:2.3:a:wordpress:wordpress:2.0.10:rc1:*:*:*:*:*:*
    cpe:2.3:a:wordpress:wordpress:2.0.10:rc1:*:*:*:*:*:*
  • cpe:2.3:a:wordpress:wordpress:2.0.10:rc2:*:*:*:*:*:*
    cpe:2.3:a:wordpress:wordpress:2.0.10:rc2:*:*:*:*:*:*
  • cpe:2.3:a:wordpress:wordpress:2.0.10:rc3:*:*:*:*:*:*
    cpe:2.3:a:wordpress:wordpress:2.0.10:rc3:*:*:*:*:*:*
  • cpe:2.3:a:wordpress:wordpress:2.0.11:*:*:*:*:*:*:*
    cpe:2.3:a:wordpress:wordpress:2.0.11:*:*:*:*:*:*:*
  • cpe:2.3:a:wordpress:wordpress:2.0.11:-:*:*:*:*:*:*
    cpe:2.3:a:wordpress:wordpress:2.0.11:-:*:*:*:*:*:*
  • cpe:2.3:a:wordpress:wordpress:2.0.11:rc1:*:*:*:*:*:*
    cpe:2.3:a:wordpress:wordpress:2.0.11:rc1:*:*:*:*:*:*
  • cpe:2.3:a:wordpress:wordpress:2.0.11:rc2:*:*:*:*:*:*
    cpe:2.3:a:wordpress:wordpress:2.0.11:rc2:*:*:*:*:*:*
  • cpe:2.3:a:wordpress:wordpress:2.0.11:rc3:*:*:*:*:*:*
    cpe:2.3:a:wordpress:wordpress:2.0.11:rc3:*:*:*:*:*:*
  • cpe:2.3:a:wordpress:wordpress:2.1:*:*:*:*:*:*:*
    cpe:2.3:a:wordpress:wordpress:2.1:*:*:*:*:*:*:*
  • cpe:2.3:a:wordpress:wordpress:2.1:-:*:*:*:*:*:*
    cpe:2.3:a:wordpress:wordpress:2.1:-:*:*:*:*:*:*
  • cpe:2.3:a:wordpress:wordpress:2.1:beta1:*:*:*:*:*:*
    cpe:2.3:a:wordpress:wordpress:2.1:beta1:*:*:*:*:*:*
  • cpe:2.3:a:wordpress:wordpress:2.1:beta2:*:*:*:*:*:*
    cpe:2.3:a:wordpress:wordpress:2.1:beta2:*:*:*:*:*:*
  • cpe:2.3:a:wordpress:wordpress:2.1:beta3:*:*:*:*:*:*
    cpe:2.3:a:wordpress:wordpress:2.1:beta3:*:*:*:*:*:*
  • cpe:2.3:a:wordpress:wordpress:2.1:beta4:*:*:*:*:*:*
    cpe:2.3:a:wordpress:wordpress:2.1:beta4:*:*:*:*:*:*
  • cpe:2.3:a:wordpress:wordpress:2.1:rc1:*:*:*:*:*:*
    cpe:2.3:a:wordpress:wordpress:2.1:rc1:*:*:*:*:*:*
  • cpe:2.3:a:wordpress:wordpress:2.1:rc2:*:*:*:*:*:*
    cpe:2.3:a:wordpress:wordpress:2.1:rc2:*:*:*:*:*:*
  • cpe:2.3:a:wordpress:wordpress:2.1.1:*:*:*:*:*:*:*
    cpe:2.3:a:wordpress:wordpress:2.1.1:*:*:*:*:*:*:*
  • cpe:2.3:a:wordpress:wordpress:2.1.1:-:*:*:*:*:*:*
    cpe:2.3:a:wordpress:wordpress:2.1.1:-:*:*:*:*:*:*
  • cpe:2.3:a:wordpress:wordpress:2.1.1:beta1:*:*:*:*:*:*
    cpe:2.3:a:wordpress:wordpress:2.1.1:beta1:*:*:*:*:*:*
  • cpe:2.3:a:wordpress:wordpress:2.1.1:rc1:*:*:*:*:*:*
    cpe:2.3:a:wordpress:wordpress:2.1.1:rc1:*:*:*:*:*:*
  • cpe:2.3:a:wordpress:wordpress:2.1.2:*:*:*:*:*:*:*
    cpe:2.3:a:wordpress:wordpress:2.1.2:*:*:*:*:*:*:*
  • cpe:2.3:a:wordpress:wordpress:2.1.3:*:*:*:*:*:*:*
    cpe:2.3:a:wordpress:wordpress:2.1.3:*:*:*:*:*:*:*
  • cpe:2.3:a:wordpress:wordpress:2.1.3:-:*:*:*:*:*:*
    cpe:2.3:a:wordpress:wordpress:2.1.3:-:*:*:*:*:*:*
  • cpe:2.3:a:wordpress:wordpress:2.1.3:rc1:*:*:*:*:*:*
    cpe:2.3:a:wordpress:wordpress:2.1.3:rc1:*:*:*:*:*:*
  • cpe:2.3:a:wordpress:wordpress:2.1.3:rc2:*:*:*:*:*:*
    cpe:2.3:a:wordpress:wordpress:2.1.3:rc2:*:*:*:*:*:*
  • cpe:2.3:a:wordpress:wordpress:2.1.3:rc3:*:*:*:*:*:*
    cpe:2.3:a:wordpress:wordpress:2.1.3:rc3:*:*:*:*:*:*
  • cpe:2.3:a:wordpress:wordpress:2.2:*:*:*:*:*:*:*
    cpe:2.3:a:wordpress:wordpress:2.2:*:*:*:*:*:*:*
  • cpe:2.3:a:wordpress:wordpress:2.2:-:*:*:*:*:*:*
    cpe:2.3:a:wordpress:wordpress:2.2:-:*:*:*:*:*:*
  • cpe:2.3:a:wordpress:wordpress:2.2:rc1:*:*:*:*:*:*
    cpe:2.3:a:wordpress:wordpress:2.2:rc1:*:*:*:*:*:*
  • cpe:2.3:a:wordpress:wordpress:2.2:rc2:*:*:*:*:*:*
    cpe:2.3:a:wordpress:wordpress:2.2:rc2:*:*:*:*:*:*
  • cpe:2.3:a:wordpress:wordpress:2.2.1:*:*:*:*:*:*:*
    cpe:2.3:a:wordpress:wordpress:2.2.1:*:*:*:*:*:*:*
  • cpe:2.3:a:wordpress:wordpress:2.2.1:-:*:*:*:*:*:*
    cpe:2.3:a:wordpress:wordpress:2.2.1:-:*:*:*:*:*:*
  • cpe:2.3:a:wordpress:wordpress:2.2.1:rc1:*:*:*:*:*:*
    cpe:2.3:a:wordpress:wordpress:2.2.1:rc1:*:*:*:*:*:*
  • cpe:2.3:a:wordpress:wordpress:2.2.1:rc2:*:*:*:*:*:*
    cpe:2.3:a:wordpress:wordpress:2.2.1:rc2:*:*:*:*:*:*
CVSS
Base: 4.0 (as of 15-10-2018 - 21:29)
Impact:
Exploitability:
CWE NVD-CWE-Other
CAPEC
Access
VectorComplexityAuthentication
NETWORK HIGH NONE
Impact
ConfidentialityIntegrityAvailability
PARTIAL PARTIAL NONE
cvss-vector via4 AV:N/AC:H/Au:N/C:P/I:P/A:N
refmap via4
bugtraq 20070705 Redirection Vulnerability in wp-pass.php, WordPress 2.2.1
debian DSA-1564
osvdb 40802
secunia 30013
sreason 2869
xf wordpress-wppass-security-bypass(35272)
Last major update 15-10-2018 - 21:29
Published 10-07-2007 - 00:30
Last modified 15-10-2018 - 21:29
Back to Top