7.5
HIGH
CVE-2008-1930
WordPress Cryptographic Splicing Cookie Forgery Vulnerability
Description

The cookie authentication method in WordPress 2.5 relies on a hash of a concatenated string containing USERNAME and EXPIRY_TIME, which allows remote attackers to forge cookies by registering a username that results in the same concatenated string, as demonstrated by registering usernames beginning with "admin" to obtain administrator privileges, aka a "cryptographic splicing" issue. NOTE: this vulnerability exists because of an incomplete fix for CVE-2007-6013.

INFO

Published Date :

April 28, 2008, 8:05 p.m.

Last Modified :

Nov. 21, 2024, 12:45 a.m.

Remotely Exploitable :

Yes !

Impact Score :

6.4

Exploitability Score :

10.0
Public PoC/Exploit Available at Github

CVE-2008-1930 has a 3 public PoC/Exploit available at Github. Go to the Public Exploits tab to see the list.

Affected Products

The following products are affected by CVE-2008-1930 vulnerability. Even if cvefeed.io is aware of the exact versions of the products that are affected, the information is not represented in the table below.

ID Vendor Product Action
1 Wordpress wordpress

We scan GitHub repositories to detect new proof-of-concept exploits. Following list is a collection of public exploits and proof-of-concepts, which have been published on GitHub (sorted by the most recently updated).

A curated directory of essential cybersecurity resources and tools.

Updated: 2 months, 3 weeks ago
0 stars 0 fork 0 watcher
Born at : Sept. 6, 2024, 5:26 a.m. This repo has been linked 6 different CVEs too.

An ongoing collection infosec courses, learning tutorials, libaries, and training resources.

infosec security security-tools security-scan information-technology it infrastructure information-security

Shell Python

Updated: 1 month ago
46 stars 11 fork 11 watcher
Born at : Dec. 12, 2021, 1 a.m. This repo has been linked 6 different CVEs too.

Everything you need to get started in Infosec.

Python HTML

Updated: 2 years, 2 months ago
0 stars 2 fork 2 watcher
Born at : Dec. 29, 2020, 2:11 p.m. This repo has been linked 2 different CVEs too.

Results are limited to the first 15 repositories due to potential performance issues.

The following list is the news that have been mention CVE-2008-1930 vulnerability anywhere in the article.

The following table lists the changes that have been made to the CVE-2008-1930 vulnerability over time.

Vulnerability history details can be useful for understanding the evolution of a vulnerability, and for identifying the most recent changes that may impact the vulnerability's severity, exploitability, or other characteristics.

  • CVE Modified by af854a3a-2127-422b-91ae-364da2661108

    Nov. 21, 2024

    Action Type Old Value New Value
    Added Reference http://secunia.com/advisories/29965
    Added Reference http://wordpress.org/development/2008/04/wordpress-251/
    Added Reference http://www.cl.cam.ac.uk/users/sjm217/advisories/wordpress-cookie-integrity.txt
    Added Reference http://www.securityfocus.com/archive/1/491356/100/0/threaded
    Added Reference http://www.securityfocus.com/bid/28935
    Added Reference http://www.securitytracker.com/id?1019923
    Added Reference http://www.vupen.com/english/advisories/2008/1372/references
    Added Reference https://exchange.xforce.ibmcloud.com/vulnerabilities/42027
  • CVE Modified by [email protected]

    May. 14, 2024

    Action Type Old Value New Value
  • CVE Modified by [email protected]

    Oct. 11, 2018

    Action Type Old Value New Value
    Removed Reference http://www.securityfocus.com/archive/1/archive/1/491356/100/0/threaded [No Types Assigned]
    Added Reference http://www.securityfocus.com/archive/1/491356/100/0/threaded [No Types Assigned]
  • CVE Modified by [email protected]

    Aug. 08, 2017

    Action Type Old Value New Value
    Removed Reference http://xforce.iss.net/xforce/xfdb/42027 [No Types Assigned]
    Added Reference https://exchange.xforce.ibmcloud.com/vulnerabilities/42027 [No Types Assigned]
  • Initial Analysis by [email protected]

    Apr. 29, 2008

    Action Type Old Value New Value
EPSS is a daily estimate of the probability of exploitation activity being observed over the next 30 days. Following chart shows the EPSS score history of the vulnerability.
CWE - Common Weakness Enumeration

While CVE identifies specific instances of vulnerabilities, CWE categorizes the common flaws or weaknesses that can lead to vulnerabilities. CVE-2008-1930 is associated with the following CWEs:

Exploit Prediction

EPSS is a daily estimate of the probability of exploitation activity being observed over the next 30 days.

1.45 }} 0.05%

score

0.87210

percentile

CVSS2 - Vulnerability Scoring System
Access Vector
Access Complexity
Authentication
Confidentiality
Integrity
Availability