Record summary

CVE-2008-4769 has a selected CVSS score of 9.3; EIP currently links 1 catalogued exploit.

Description

Directory traversal vulnerability in the get_category_template function in wp-includes/theme.php in WordPress 2.3.3 and earlier, and 2.5, allows remote attackers to include and possibly execute arbitrary PHP files via the cat parameter in index.php. NOTE: some of these details are obtained from third party information.

Description source: CVE List

Exploitation context

Available material

Catalogued exploits
1

Proofs of concept

1

Catalogued exploits

ExploitDBWordPress Core 2.3.3 - 'cat' Directory TraversalExploitDB exploitby Gerendi Sandor AttilaNot analyzed1 file
ExploitDB

PoC details

References

7