CVE-2008-2392
HIGH
9.0
CVSS 2.0
Description
Unrestricted file upload vulnerability in WordPress 2.5.1 and earlier might allow remote authenticated administrators to upload and execute arbitrary PHP files via the Upload section in the Write Tabs area of the dashboard.
Affected WordPress components
-
WordPress coreUp to and including 2.5.1
A confirmed match is backed by the plugin or theme slug. A possible match is based on the product name only and should be verified.
Affected products and versions
- n/a n/a — Versions not specified
- wordpress wordpress — Up to and including 2.5.1
References
- securityreason.com http://securityreason.com/securityalert/3897 Third Party Advisory
- www.securityfocus.com http://www.securityfocus.com/archive/1/492230/100/0/threaded Third Party Advisory, VDB Entry
- www.securityfocus.com http://www.securityfocus.com/bid/29276 Third Party Advisory, VDB Entry
- exchange.xforce.ibmcloud.com https://exchange.xforce.ibmcloud.com/vulnerabilities/42561 Third Party Advisory, VDB Entry
- nvd.nist.gov Official NVD record