CVEvulnerability
CVE-2008-2392
9.0 HIGH
Official page ↗
- Status
- Modified
- Published
- 2008-05-21
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 9.0 HIGH — AV:N/AC:L/Au:S/C:C/I:C/A:C
- Weaknesses
- CWE-20
Description
Unrestricted file upload vulnerability in WordPress 2.5.1 and earlier might allow remote authenticated administrators to upload and execute arbitrary PHP files via the Upload section in the Write Tabs area of the dashboard.
Affected configurations
• wordpress wordpress (<= 2.5.1)
Related
Weakness · CWE (1)
- CWE-20 Improper Input Validation weakness
References
- http://securityreason.com/securityalert/3897 Third Party Advisory
- http://www.securityfocus.com/archive/1/492230/100/0/threaded Third Party Advisory, VDB Entry
- http://www.securityfocus.com/bid/29276 Third Party Advisory, VDB Entry
- https://exchange.xforce.ibmcloud.com/vulnerabilities/42561 Third Party Advisory, VDB Entry
- http://securityreason.com/securityalert/3897 Third Party Advisory
- http://www.securityfocus.com/archive/1/492230/100/0/threaded Third Party Advisory, VDB Entry
- http://www.securityfocus.com/bid/29276 Third Party Advisory, VDB Entry
- https://exchange.xforce.ibmcloud.com/vulnerabilities/42561 Third Party Advisory, VDB Entry