CVE

Id
32509  
CVE No.
CVE-2008-2392  
Status
Candidate  
Description
Unrestricted file upload vulnerability in WordPress 2.5.1 and earlier might allow remote authenticated administrators to upload and execute arbitrary PHP files via the Upload section in the Write Tabs area of the dashboard.  
Phase
Assigned (20080521)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
351985 32509 CVE-2008-2392 BUGTRAQ:20080519 Wordpress Malicious File Execution Vulnerability  View
351986 32509 CVE-2008-2392 URL:http://www.securityfocus.com/archive/1/archive/1/492230/100/0/threaded  View
351987 32509 CVE-2008-2392 BID:29276  View
351988 32509 CVE-2008-2392 URL:http://www.securityfocus.com/bid/29276  View
351989 32509 CVE-2008-2392 SREASON:3897  View
351990 32509 CVE-2008-2392 URL:http://securityreason.com/securityalert/3897  View
351991 32509 CVE-2008-2392 XF:wordpress-writetabs-file-upload(42561)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
50512 JVNDB-2008-005822 Wajox Software microSSys CMS の index.php における PHP リモートファイルインクルージョンの脆弱性 Wajox Software microSSys CMS の index.php には、register_globals が有効になっている際、PHP リモートファイルインクルージョンの脆弱性が存在します。 CVE-2008-2396 32509 7.5 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-005822.html  View