CVE-2008-4616 Spambam <= 2.1 - Authorization Bypass
MediumCVSS 5.0
EPSS 7.3%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
The SpamBam plugin for WordPress allows remote attackers to bypass restrictions and add blog comments by using server-supplied values to calculate a shared key.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| the spanner spambam plugin | All versions | No fix listed |
| wordpress spambam plugin | All versions | No fix listed |
| wordpress spambam(WordPress) | <= 2.1 | No fix listed |
References
- 4438 third-party-advisory
- 20080115 Exploiting the SpamBam plugin for wordpress mailing-list
- 27291 vdb-entry
- spambam-client-security-bypass(39690) vdb-entry
- Wordfence Intelligence third-party-advisory
- www.cve.org