2012-09-14 21:55:01 2012-09-17 06:00:00

The XML-RPC remote publishing interface in xmlrpc.php in WordPress before 3.0.3 does not properly check capabilities, which allows remote authenticated users to bypass intended access restrictions, and publish, edit, or delete posts, by leveraging the Author or Contributor role.

Vector

NETWORK

Complexity

LOW

Authentication

SINGLE_INSTANCE

Confidentiality

PARTIAL

Integrity

PARTIAL

Availability

PARTIAL
ontariosystems Artiva Healthcare 5.2 Maintenance Release 5 Omron NS Series System Program Firmware 8.69 Omeka 2.2 onesolutionapps Aloha Bail Bonds (aka com.onesolutionapps.alohabailbondsandroid) for android 1.1 Open Automation Software OPC Systems.NET Omeka 2.2.1 Open Automation Software OPC Systems.NET 4.0 onesolutionapps Bail Bonds (aka com.onesolutionapps.chadlewisbailbondsandroid) for android 1.1 Omron NS12 HMI Terminal Omeka 2.1.3 Omron NS5 HMI Terminal onesolutionapps AJD Bail Bonds (aka com.onesolutionapps.ajdbailbondsandroid) for android 1.1 Omron NS15 HMI Terminal One You Fitness project One You Fitness (aka com.app_oneyou.layout) for android 1.399 Omron NS8 HMI Terminal onefile OneFile Ignite (aka uk.co.onefile.ignite) for android 1.19 onelouder FriendCaster Chat (aka com.handmark.friendcaster.chat) for Android 2.0 onesolutionapps Woodward Bail (aka com.onesolutionapps.woodwardbailandroid) for android 1.1 onesolutionapps Reds Anytime Bail (aka com.onesolutionapps.redsanytimebailandroid) for android 1.1 op5 Monitor 5.4.2 Online Solutions Online Solutions Security Suite (OSSS) 1.5.14905.0 op5 Monitor 5.3.5 Omron NS Series System Program Firmware 8.70 Omron NS10 HMI Terminal OPAC Project Opac for Drupal 7.x-2.0 OneorZero Action and Information Management System (AIMS) 2.7.0 Trial Edition OneorZero Action and Information Management System (AIMS) 2.7.0 op5 Monitor 6.3.1 op5 system-op5config 2.0.3 op5 system-op5config 2.0.2 op5 Monitor 5.5.3 op5 Monitor 6.3.0 OneorZero Action and Information Management System (AIMS) 2.8.0 Build 231211 Trial Edition opalvoip Portable Tool Library (aka PTLib) 2.10.2 opalvoip Portable Tool Library (aka PTLib) 2.10.9 ontariosystems Artiva Architect 3.2 Maintenance Release 5 onesolutionapps AAAA Discount Bail (aka com.onesolutionapps.aaaadiscountbailandroid) for android 1.1 onesolutionapps Bust Out Bail (aka com.onesolutionapps.bustoutbailandroid) for android 1.1 op5 Monitor 5.5.0 opalvoip Portable Tool Library (aka PTLib) 2.10.1 ontariosystems Artiva RM 3.1 Maintenance Release 7 op5 Monitor 5.4.0 opalvoip Portable Tool Library (aka PTLib) 2.10.7 opalvoip Portable Tool Library (aka PTLib) 2.10.10 Omron NS Series System Program Firmware 8.68 OneorZero Action and Information Management System (AIMS) 2.6.0 Members Edition Linux Omnikey Cardman 4040 Omni Group OmniWeb 5.1 563.34 Linux Omnikey Cardman Omeka 2.0.1 Omeka 2.1.4 omnistaretools OmniStar Recruiting Omeka 2.2.2 ontariosystems Artiva Workstation 1.3.9 OMFG Mobile plugin for WordPress 1.1.26 Ooorl plugin for WordPress Omeka 1.5.2 Omeka 2.0.2 Omeka 2.0.3 Omeka 2.0.4 op5 Monitor 5.5.1 Omeka 1.5.1 Omeka 2.1.2 Omeka 2.1 Omeka 2.1.1 ontariosystems Artiva Workstation 1.3.0 Omeka 1.5.3 Omeka 2.0 op5 system-portal 1.6.2 op5 system-portal 1.6.1