Description

vars.php in WordPress 2.0.2, possibly when running on Mac OS X, allows remote attackers to spoof their IP address via a PC_REMOTE_ADDR HTTP header, which vars.php uses to redefine $_SERVER['REMOTE_ADDR'].

Remediation

References

CVE-2006-2702

Related Vulnerabilities

MySQL CVE-2016-0640 Vulnerability (CVE-2016-0640)

WordPress Plugin YITH WooCommerce Ajax Search Security Bypass (1.6.9)

WordPress Plugin WP Airbnb Review Slider SQL Injection (3.2)

PHP4 IMAP module buffer overflow vulnerability

Oracle Database Server CVE-2014-6453 Vulnerability (CVE-2014-6453)

Severity

Medium

Classification

CVE-2006-2702

Tags

Missing Update Known Vulnerabilities