Lucene search

K
cvelistMitreCVELIST:CVE-2008-2146
HistoryMay 12, 2008 - 8:00 p.m.

CVE-2008-2146

2008-05-1220:00:00
mitre
www.cve.org

6.5 Medium

AI Score

Confidence

Low

0.009 Low

EPSS

Percentile

82.8%

wp-includes/vars.php in Wordpress before 2.2.3 does not properly extract the current path from the PATH_INFO ($PHP_SELF), which allows remote attackers to bypass intended access restrictions for certain pages.

6.5 Medium

AI Score

Confidence

Low

0.009 Low

EPSS

Percentile

82.8%