Comments on: WordPress Unauthorised Comments Disclosure http://blogsecurity.net/news/news-310507 Always something worth reading... Fri, 12 Mar 2010 11:09:45 +0000 http://wordpress.org/?v= hourly 1 By: David Kierznowski http://blogsecurity.net/news/news-310507/comment-page-1#comment-149 David Kierznowski Tue, 05 Jun 2007 09:56:04 +0000 http://blogsecurity.net/?p=20#comment-149 Matt, your starting to sound like Microsoft ;> Thanks for the feedback. Matt, your starting to sound like Microsoft ;>

Thanks for the feedback.

]]> By: Matt http://blogsecurity.net/news/news-310507/comment-page-1#comment-148 Matt Tue, 05 Jun 2007 09:46:04 +0000 http://blogsecurity.net/?p=20#comment-148 That is a feature, not a bug, and was "reported" years ago when the feature was introduced. That is a feature, not a bug, and was “reported” years ago when the feature was introduced.

]]> By: SecBlog » Falha de baixo risco no Wordpress http://blogsecurity.net/news/news-310507/comment-page-1#comment-147 SecBlog » Falha de baixo risco no Wordpress Mon, 04 Jun 2007 18:07:34 +0000 http://blogsecurity.net/?p=20#comment-147 [...] Uma descrição completa (em inglês) está disponível aqui. [...] [...] Uma descrição completa (em inglês) está disponível aqui. [...]

]]> By: » Wordpress Unauthorized Comment Disclosure » www.notsosecure.com http://blogsecurity.net/news/news-310507/comment-page-1#comment-145 » Wordpress Unauthorized Comment Disclosure » www.notsosecure.com Fri, 01 Jun 2007 07:05:35 +0000 http://blogsecurity.net/?p=20#comment-145 [...] By Enumerating, the name and email address of a comment author, an attacker can read the comment submitted by the author while the comment still waits an administrator to approve it and publish it. This again points to the need for a better session management in Wordpress. Read the full story here [...] [...] By Enumerating, the name and email address of a comment author, an attacker can read the comment submitted by the author while the comment still waits an administrator to approve it and publish it. This again points to the need for a better session management in Wordpress. Read the full story here [...]

]]> By: BlogSecurity » WordPress BlogWatch http://blogsecurity.net/news/news-310507/comment-page-1#comment-146 BlogSecurity » WordPress BlogWatch Fri, 01 Jun 2007 06:55:55 +0000 http://blogsecurity.net/?p=20#comment-146 [...] Unauthorised Comments Disclosure (more) [...] [...] Unauthorised Comments Disclosure (more) [...]

]]>