Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cveMitreCVE-2008-0194
HistoryJan 10, 2008 - 12:46 a.m.

CVE-2008-0194

2008-01-1000:46:00
CWE-22
mitre
web.nvd.nist.gov
43
cve-2008-0194
wordpress
directory traversal
vulnerability
remote attackers
arbitrary files
denial of service
nvd

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

AI Score

6.4

Confidence

Low

EPSS

0.01

Percentile

84.0%

JSON

Directory traversal vulnerability in wp-db-backup.php in WordPress 2.0.3 and earlier allows remote attackers to read arbitrary files, delete arbitrary files, and cause a denial of service via a … (dot dot) in the backup parameter in a wp-db-backup.php action to wp-admin/edit.php. NOTE: this might be the same as CVE-2006-5705.1.

Affected configurations

Nvd
Node
wordpresswordpressRange≤2.0.3
VendorProductVersionCPE
wordpresswordpresscpe:/a:wordpress:wordpress::::

Related

prion 1
debiancve 2
nvd 2
cvelist 2
ubuntucve 2
patchstack 2
securityvulns 3
openvas 4
debian 2
nessus 2
osv 1
cve 1
gentoo 1
prion
prion
Directory traversal
2008-01-10 00:46:00
debiancve
debiancve
CVE-2008-0194
2008-01-10 00:46:00
CVE-2006-5705
2006-11-04 01:07:00
nvd
nvd
CVE-2008-0194
2008-01-10 00:46:00
CVE-2006-5705
2006-11-04 01:07:00
cvelist
cvelist
CVE-2008-0194
2008-01-10 00:00:00
CVE-2006-5705
2006-11-04 01:00:00
ubuntucve
ubuntucve
CVE-2008-0194
2008-01-10 00:00:00
CVE-2006-5705
2006-11-04 00:00:00
patchstack
patchstack
WordPress <= 2.0.3 - Directory Traversal
2008-01-09 00:00:00
WordPress <= 2.0.4 - Multiple Directory Traversal
2006-11-03 00:00:00
securityvulns
securityvulns
Information Leakage and Full path disclosure vulnerabilities in WordPress
2010-08-05 00:00:00
[SECURITY] [DSA 1502-1] New wordpress packages fix multiple vulnerabilities
2008-02-24 00:00:00
[ GLSA 200611-10 ] WordPress: Multiple vulnerabilities
2006-11-18 00:00:00
openvas
openvas
Debian: Security Advisory (DSA-1502-1)
2008-02-28 00:00:00
Debian Security Advisory DSA 1502-1 (wordpress)
2008-02-28 00:00:00
Gentoo Security Advisory GLSA 200611-10 (wordpress)
2008-09-24 00:00:00
debian
debian
[SECURITY] [DSA 1502-1] New wordpress packages fix multiple vulnerabilities
2008-02-22 00:46:44
[SECURITY] [DSA 1502-1] New wordpress packages fix multiple vulnerabilities
2008-02-22 00:46:44
nessus
nessus
Debian DSA-1502-1 : wordpress - several vulnerabilities
2008-02-25 00:00:00
GLSA-200611-10 : WordPress: Multiple vulnerabilities
2006-11-20 00:00:00
osv
osv
wordpress - multiple vulnerabilities
2008-02-22 00:00:00
cve
cve
CVE-2006-5705
2006-11-04 01:07:00
gentoo
gentoo
WordPress: Multiple vulnerabilities
2006-11-17 00:00:00

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

AI Score

6.4

Confidence

Low

EPSS

0.01

Percentile

84.0%

JSON
Related for CVE-2008-0194
prion1debiancve2nvd2cvelist2ubuntucve2patchstack2securityvulns3openvas4debian2nessus2osv1cve1gentoo1