admin/cve
1
0 Fork 0
mirror of https://github.com/0xMarcio/cve.git synced 2026-10-27 16:51:03 +00:00
Code Issues Packages Projects Releases Wiki Activity
Files
main
cve/cves/2010/CVE-2010-5296.md
T

711 B
Raw Permalink Blame History

CVE-2010-5296

Description

wp-includes/capabilities.php in WordPress before 3.0.2, when a Multisite configuration is used, does not require the Super Admin role for the delete_users capability, which allows remote authenticated administrators to bypass intended access restrictions via a delete action.

POC

Reference

No PoCs from references.

Github

No PoCs found on GitHub currently.

Reference in new issue View Git Blame Copy Permalink