CalvinBackup/CVEs-PoC
1
0
Fork 0
mirror of https://github.com/0xMarcio/cve.git synced 2026-04-21 14:06:08 +02:00
Code Issues Packages Projects Releases Wiki Activity
Files
main
CVEs-PoC/2017/CVE-2017-14990.md
T
0xMarcio cb00e1339f Update CVE list 2025-09-29 21:09
2025-09-29 21:09:30 +02:00

802 B
Raw Permalink Blame History

CVE-2017-14990

Description

WordPress 4.8.2 stores cleartext wp_signups.activation_key values (but stores the analogous wp_users.user_activation_key values as hashes), which might make it easier for remote attackers to hijack unactivated user accounts by leveraging database read access (such as access gained through an unspecified SQL injection vulnerability).

POC

Reference

No PoCs from references.

Github

Reference in New Issue View Git Blame Copy Permalink