CVE-2008-4769

Published Oct 28, 2008 CVSS 2.0 · 9.3 Critical EPSS 9.0% KEV · Not listed
Description
Directory traversal vulnerability in the get_category_template function in wp-includes/theme.php in WordPress 2.3.3 and earlier, and 2.5, allows remote attackers to include and possibly execute arbitrary PHP files via the cat parameter in index.php. NOTE: some of these details are obtained from third party information.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
Debian DSA Debian DSA DSA-1871-1 New wordpress packages fix several vulnerabilities
Debian DSA Debian DSA DSA-1871-2 New wordpress packages fix regression
History

No history.

Weaknesses

Sources

Status
PUBLISHED
Assigner
mitre
Published
Updated
Aug 7, 2024, 10:31 AM
Reserved
Oct 27, 2008, 12:00 AM
Status
Modified
Published
Oct 28, 2008, 10:30 AM
Modified
Jun 16, 2026, 10:58 PM