Lucene search

K
cve[email protected]CVE-2008-6767
HistoryApr 28, 2009 - 4:30 p.m.

CVE-2008-6767

2009-04-2816:30:00
NVD-CWE-noinfo
web.nvd.nist.gov
36
4
cve
2008
6767
wordpress
upgrade
remote attackers
denial of service
outage
nvd

6.4 Medium

AI Score

Confidence

Low

10 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

0.006 Low

EPSS

Percentile

79.1%

wp-admin/upgrade.php in WordPress, probably 2.6.x, allows remote attackers to upgrade the application, and possibly cause a denial of service (application outage), via a direct request.

CPENameOperatorVersion
wordpress:wordpresswordpresseq2.6

Social References

More

6.4 Medium

AI Score

Confidence

Low

10 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

0.006 Low

EPSS

Percentile

79.1%