Lucene search
Ubuntu.comUB:CVE-2008-2146HistoryMay 12, 2008 - 12:00 a.m.
CVE-2008-2146
2008-05-1200:00:00
ubuntu.com
ubuntu.com
7
0.009 Low
EPSS
Percentile
82.8%
wp-includes/vars.php in Wordpress before 2.2.3 does not properly extract
the current path from the PATH_INFO ($PHP_SELF), which allows remote
attackers to bypass intended access restrictions for certain pages.
Notes
| Author | Note |
|---|---|
| wgrant | Rather old. Fixed in >= hardy. |
Related
debiancve
debiancve
CVE-2008-2146
2008-05-12 20:20:00
cve
cve
CVE-2008-2146
2008-05-12 20:20:00
prion
prion
Design/Logic Flaw
2008-05-12 20:20:00
patchstack
patchstack
WordPress <= 2.2.2 - BYPASS
2008-05-12 00:00:00
nvd
nvd
CVE-2008-2146
2008-05-12 20:20:00
cvelist
cvelist
CVE-2008-2146
2008-05-12 20:00:00
osv
osv
wordpress - several vulnerabilities
2008-05-01 00:00:00
openvas
openvas
Debian: Security Advisory (DSA-1564-1)
2008-05-12 00:00:00