CVE-2008-2392

Опубликовано: 21 мая 2008

Источник: nvd

CVSS2: 9

EPSS Низкий

Описание

Unrestricted file upload vulnerability in WordPress 2.5.1 and earlier might allow remote authenticated administrators to upload and execute arbitrary PHP files via the Upload section in the Write Tabs area of the dashboard.

Ссылки

http://securityreason.com/securityalert/3897
Third Party Advisory
http://www.securityfocus.com/archive/1/492230/100/0/threaded
Third Party Advisory
VDB Entry
http://www.securityfocus.com/bid/29276
Third Party Advisory
VDB Entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/42561
Third Party Advisory
VDB Entry
http://securityreason.com/securityalert/3897
Third Party Advisory
http://www.securityfocus.com/archive/1/492230/100/0/threaded
Third Party Advisory
VDB Entry
http://www.securityfocus.com/bid/29276
Third Party Advisory
VDB Entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/42561
Third Party Advisory
VDB Entry

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*

Версия до 2.5.1 (включая)

EPSS

Процентиль: 83%

0.01929

Низкий

9 Critical

CVSS2

Дефекты

CWE-20

Связанные уязвимости

CVE-2008-2392

ubuntu

около 17 лет назад

CVE-2008-2392

redhat

около 17 лет назад

CVE-2008-2392

debian

около 17 лет назад

Unrestricted file upload vulnerability in WordPress 2.5.1 and earlier ...

GHSA-g734-67mf-ffrp

github

больше 3 лет назад

EPSS

Процентиль: 83%

0.01929

Низкий

9 Critical

CVSS2

Дефекты

CWE-20