Lucene search
Debian Security Bug TrackerDEBIANCVE:CVE-2008-4769HistoryOct 28, 2008 - 10:30 a.m.
CVE-2008-4769
2008-10-2810:30:01
Debian Security Bug Tracker
security-tracker.debian.org
15
CVSS2
9.3
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:M/Au:N/C:C/I:C/A:C
EPSS
0.012
Percentile
85.5%
Directory traversal vulnerability in the get_category_template function in wp-includes/theme.php in WordPress 2.3.3 and earlier, and 2.5, allows remote attackers to include and possibly execute arbitrary PHP files via the cat parameter in index.php. NOTE: some of these details are obtained from third party information.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Debian | 12 | all | wordpress | < 2.5.1-1 | wordpress_2.5.1-1_all.deb |
| Debian | 11 | all | wordpress | < 2.5.1-1 | wordpress_2.5.1-1_all.deb |
| Debian | 999 | all | wordpress | < 2.5.1-1 | wordpress_2.5.1-1_all.deb |
| Debian | 13 | all | wordpress | < 2.5.1-1 | wordpress_2.5.1-1_all.deb |
Related
openvas
openvas
WordPress cat Parameter Directory Traversal Vulnerability
2008-11-05 00:00:00
Debian Security Advisory DSA 1871-2 (wordpress)
2009-09-02 00:00:00
Debian: Security Advisory (DSA-1871-1)
2009-09-02 00:00:00
cve
cve
CVE-2008-4769
2008-10-28 10:30:01
nessus
nessus
WordPress index.php 'cat' Parameter Local File Inclusion
2008-04-29 00:00:00
Debian DSA-1871-1 : wordpress - several vulnerabilities
2010-02-24 00:00:00
cvelist
cvelist
CVE-2008-4769
2008-10-28 10:00:00
exploitdb
exploitdb
WordPress Core 2.3.3 - 'cat' Directory Traversal
2008-04-18 00:00:00
ubuntucve
ubuntucve
CVE-2008-4769
2008-10-28 00:00:00
prion
prion
Directory traversal
2008-10-28 10:30:00
nvd
nvd
CVE-2008-4769
2008-10-28 10:30:01
patchstack
patchstack
WordPress <= 2.3.3 - Directory Traversal
2008-10-27 00:00:00
osv
osv
wordpress - regression fix
2009-08-23 00:00:00
wordpress - several vulnerabilities
2009-08-23 00:00:00
debian
debian
[SECURITY] [DSA 1871-2] New wordpress packages fix regression
2009-08-27 01:39:01
[SECURITY] [DSA 1871-1] New wordpress packages fix several vulnerabilities
2009-08-23 03:41:14
CVSS2
9.3
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:M/Au:N/C:C/I:C/A:C
EPSS
0.012
Percentile
85.5%
Related for DEBIANCVE:CVE-2008-4769