CVE-2008-4769
HIGH
9.3
CVSS 2.0
Description
Directory traversal vulnerability in the get_category_template function in wp-includes/theme.php in WordPress 2.3.3 and earlier, and 2.5, allows remote attackers to include and possibly execute arbitrary PHP files via the cat parameter in index.php. NOTE: some of these details are obtained from third party information.
Affected WordPress components
-
WordPress coreUp to and including 2.3.3; Version 0.6.2; Version 0.6.2.1; Version 0.7; Version 0.71; Version 0.71-gold; Version 0.72; Version 0.711; Version 1.0; Version 1.0-platinum; Version 1.0.1; Version 1.0.1-miles; Version 1.0.2; Version 1.0.2-blakey; Version 1.2; Version 1.2-delta; Version 1.2-mingus; Version 1.2.1; Version 1.2.2; Version 1.3.1; Version 1.4; Version 1.5; Version 1.5-strayhorn; Version 1.5.1; Version 1.5.1.1; Version 1.5.1.2; Version 1.5.1.3; Version 1.5.2; Version 1.6; Version 2.0; Version 2.0.1; Version 2.0.2; Version 2.0.3; Version 2.0.4; Version 2.0.5; Version 2.0.6; Version 2.0.7; Version 2.0.8; Version 2.0.9; Version 2.0.10; Version 2.0.10_rc1; Version 2.0.10_rc2; Version 2.0.11; Version 2.1; Version 2.1.1; Version 2.1.2; Version 2.1.3; Version 2.1.3_rc1; Version 2.1.3_rc2; Version 2.2; Version 2.2.0; Version 2.2.1; Version 2.2.2; Version 2.2.3; Version 2.2_revision5002; Version 2.2_revision5003; Version 2.3; Version 2.3.1; Version 2.3.2; Version 2.5
A confirmed match is backed by the plugin or theme slug. A possible match is based on the product name only and should be verified.
Affected products and versions
- n/a n/a — Versions not specified
- wordpress wordpress — Up to and including 2.3.3
- wordpress wordpress — Version 0.6.2
- wordpress wordpress — Version 0.6.2.1
- wordpress wordpress — Version 0.7
- wordpress wordpress — Version 0.71
- wordpress wordpress — Version 0.71-gold
- wordpress wordpress — Version 0.72
- wordpress wordpress — Version 0.711
- wordpress wordpress — Version 1.0
- wordpress wordpress — Version 1.0-platinum
- wordpress wordpress — Version 1.0.1
- wordpress wordpress — Version 1.0.1-miles
- wordpress wordpress — Version 1.0.2
- wordpress wordpress — Version 1.0.2-blakey
- wordpress wordpress — Version 1.2
- wordpress wordpress — Version 1.2-delta
- wordpress wordpress — Version 1.2-mingus
- wordpress wordpress — Version 1.2.1
- wordpress wordpress — Version 1.2.2
- wordpress wordpress — Version 1.3.1
- wordpress wordpress — Version 1.4
- wordpress wordpress — Version 1.5
- wordpress wordpress — Version 1.5-strayhorn
- wordpress wordpress — Version 1.5.1
- wordpress wordpress — Version 1.5.1.1
- wordpress wordpress — Version 1.5.1.2
- wordpress wordpress — Version 1.5.1.3
- wordpress wordpress — Version 1.5.2
- wordpress wordpress — Version 1.6
- wordpress wordpress — Version 2.0
- wordpress wordpress — Version 2.0.1
- wordpress wordpress — Version 2.0.2
- wordpress wordpress — Version 2.0.3
- wordpress wordpress — Version 2.0.4
- wordpress wordpress — Version 2.0.5
- wordpress wordpress — Version 2.0.6
- wordpress wordpress — Version 2.0.7
- wordpress wordpress — Version 2.0.8
- wordpress wordpress — Version 2.0.9
- wordpress wordpress — Version 2.0.10
- wordpress wordpress — Version 2.0.10_rc1
- wordpress wordpress — Version 2.0.10_rc2
- wordpress wordpress — Version 2.0.11
- wordpress wordpress — Version 2.1
- wordpress wordpress — Version 2.1.1
- wordpress wordpress — Version 2.1.2
- wordpress wordpress — Version 2.1.3
- wordpress wordpress — Version 2.1.3_rc1
- wordpress wordpress — Version 2.1.3_rc2
- wordpress wordpress — Version 2.2
- wordpress wordpress — Version 2.2.0
- wordpress wordpress — Version 2.2.1
- wordpress wordpress — Version 2.2.2
- wordpress wordpress — Version 2.2.3
- wordpress wordpress — Version 2.2_revision5002
- wordpress wordpress — Version 2.2_revision5003
- wordpress wordpress — Version 2.3
- wordpress wordpress — Version 2.3.1
- wordpress wordpress — Version 2.3.2
- wordpress wordpress — Version 2.5
References
- secunia.com http://secunia.com/advisories/29949 Vendor Advisory
- trac.wordpress.org http://trac.wordpress.org/changeset/7586
- www.debian.org http://www.debian.org/security/2009/dsa-1871
- www.juniper.fi http://www.juniper.fi/security/auto/vulnerabilities/vuln28845.html
- www.securityfocus.com http://www.securityfocus.com/bid/28845 Exploit
- exchange.xforce.ibmcloud.com https://exchange.xforce.ibmcloud.com/vulnerabilities/41920
- nvd.nist.gov Official NVD record