Exploitation Summary
EIP tracks 1 public exploit for CVE-2008-4769. PoCs published by Gerendi Sandor Attila.
AI-analyzed exploit summary This exploit demonstrates a directory traversal vulnerability in WordPress 2.3.3 by manipulating the 'cat' parameter to access sensitive files. The PoC URL shows how an attacker can traverse directories to potentially access arbitrary files.
Description
Directory traversal vulnerability in the get_category_template function in wp-includes/theme.php in WordPress 2.3.3 and earlier, and 2.5, allows remote attackers to include and possibly execute arbitrary PHP files via the cat parameter in index.php. NOTE: some of these details are obtained from third party information.
Exploits (1)
This exploit demonstrates a directory traversal vulnerability in WordPress 2.3.3 by manipulating the 'cat' parameter to access sensitive files. The PoC URL shows how an attacker can traverse directories to potentially access arbitrary files.