CVE-2008-4106

WordPress before 2.6.2 does not properly handle MySQL warnings about insertion of username strings that exceed the maximum column width of the user_login column, and does not properly handle space characters when comparing usernames, which allows remote attackers to change an arbitrary user's password to a random value by registering a similar username and then requesting a password reset, related to a "SQL column truncation vulnerability." NOTE: the attacker can discover the random password by also exploiting CVE-2008-4107.

CVSS v2.0

5.1 MEDIUMAV:N/AC:H/Au:N/C:P/I:P/A:P

EPSS

5.48% chance of exploitation in the next 30 days, 92th percentile

Nuclei

high

Published

2008-09-18

Updated

2024-08-07

Proof-of-concept exploits (2)

• https://www.exploit-db.com/exploits/6397
• https://www.exploit-db.com/exploits/6421

Nuclei templates (1)

• topscoder/nuclei-wordfence-cve/blob/main/nuclei-templates/2008/CVE-2008-4106-wordpress-35…

References

• CVE Record
• NVD entry

Related

• CVE-2008-4101
• CVE-2008-4107
• CVE-2008-4100
• CVE-2008-4110
• CVE-2008-4096
• CVE-2008-4113