Published: 10/01/2008 Updated: 15/10/2018

CVSS v2 Base Score: 7.5 | Impact Score: 6.4 | Exploitability Score: 10

VMScore: 668

Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P

Directory traversal vulnerability in wp-db-backup.php in WordPress 2.0.3 and previous versions allows remote malicious users to read arbitrary files, delete arbitrary files, and cause a denial of service via a .. (dot dot) in the backup parameter in a wp-db-backup.php action to wp-admin/edit.php. NOTE: this might be the same as CVE-2006-5705.1.

Vulnerable Product	Search on Vulmon	Subscribe to Product
wordpress wordpress

Several remote vulnerabilities have been discovered in wordpress, a weblog manager The Common Vulnerabilities and Exposures project identifies the following problems: CVE-2007-3238 Cross-site scripting (XSS) vulnerability in functionsphp in the default theme in WordPress allows remote authenticated administrators to inject arbitrary ...

CWE-22 http://lists.grok.org.uk/pipermail/full-disclosure/2008-January/059439.html http://securityvulns.ru/Sdocument755.html http://websecurity.com.ua/1676/http://www.securityfocus.com/bid/27123 http://www.debian.org/security/2008/dsa-1502 http://secunia.com/advisories/29014 http://securityreason.com/securityalert/3539 http://www.securityfocus.com/archive/1/485786/100/0/threaded https://nvd.nist.gov https://www.debian.org/security/./dsa-1502

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2008-0194

Vulnerability Summary

Vendor Advisories

References

Vulmon Search

About

Products

Connect