PT-2008-5980 · WordPress · Wordpress

Mark Jaquith · Published 2008-10-28 · Updated 2017-08-08 · CVE-2008-4769

Positive Technologies (AI Summary)

CVSS v2.0

9.3

High

Base vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions WordPress versions prior to 2.3.3 WordPress version 2.5

Description A directory traversal issue exists in the get category template function, allowing remote attackers to include and possibly execute arbitrary PHP files. This is achieved by manipulating the cat parameter in the "index.php" endpoint.

Recommendations For WordPress versions prior to 2.3.3, update to a version later than 2.3.3 to resolve the issue. For WordPress version 2.5, consider disabling the get category template function or restricting access to the cat parameter in the "index.php" endpoint until a patch is available.

Exploit

Fix

Path traversal

Weakness Enumeration

CWE-22

Related Identifiers

CVE-2008-4769

DSA-1871-1

DSA-1871-2

Affected Products

Wordpress

References · 12

• 🔥 https://exploit-db.com/exploits/31670 · Exploit
• 🔥 http://securityfocus.com/bid/28845 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2008-4769 · Security Note
• http://debian.org/security/2009/dsa-1871 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2008-4769 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2008-4769 · Vendor Advisory
• http://secunia.com/advisories/29949 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2008-4769 · Vendor Advisory
• http://trac.wordpress.org/changeset/7586 · Note
• http://juniper.fi/security/auto/vulnerabilities/vuln28845.html · Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-4769 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/41920 · Note