CVE-2008-0194 Path traversal in n/a

High 7.5 Published 10 Jan 2008 Updated 7 Aug 2024

Remote attackers with low privileges can read or delete arbitrary files and cause denial of service via path traversal in the wp-db-backup plugin.

Exploited in the wild: Not known
Login needed: Any signed-in user
Attackable: Over the internet
Victim action needed: Not needed
Fix: Available

What is CVE-2008-0194?

CVE-2008-0194 is a high-severity path traversal vulnerability in Wordpress Wordpress, published on 10 Jan 2008. Any signed-in user can exploit it over the network, with no action from the victim.

Official description

Directory traversal vulnerability in wp-db-backup.php in WordPress 2.0.3 and earlier allows remote attackers to read arbitrary files, delete arbitrary files, and cause a denial of service via a .. (dot dot) in the backup parameter in a wp-db-backup.php action to wp-admin/edit.php. NOTE: this might be the same as CVE-2006-5705.1.

Weakness: CWE-22

Which versions are affected by CVE-2008-0194?

It affects 1 product.

Products include Wordpress Wordpress.

How do I fix CVE-2008-0194?

Upgrade to a fixed version.

Upgrade, and resolve every user-supplied path against an allowed base folder before opening it. More about Path traversal.

Is CVE-2008-0194 being exploited?

There is no known exploitation of CVE-2008-0194 in the wild and no public exploit code.

All Wordpress Wordpress vulnerabilities

Sources

Also known as DEBIAN-CVE-2008-0194, GHSA-wjp2-fcqj-8w42.