CVE-2008-0196 Path traversal in n/a
Remote attackers with low privileges can read or modify arbitrary files via directory traversal in WordPress admin scripts.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2008-0196?
CVE-2008-0196 is a medium-severity path traversal vulnerability in Wordpress Wordpress, published on 10 Jan 2008. Any signed-in user can exploit it over the network, with no action from the victim.
Official description
Multiple directory traversal vulnerabilities in WordPress 2.0.11 and earlier allow remote attackers to read arbitrary files via a .. (dot dot) in (1) the page parameter to certain PHP scripts under wp-admin/ or (2) the import parameter to wp-admin/admin.php, as demonstrated by discovering the full path via a request for the \..\..\wp-config pathname; and allow remote attackers to modify arbitrary files via a .. (dot dot) in the file parameter to wp-admin/templates.php.
Weakness: CWE-22
Which versions are affected by CVE-2008-0196?
It affects 1 product.
Products include Wordpress Wordpress.
How do I fix CVE-2008-0196?
Upgrade to a fixed version.
Upgrade, and resolve every user-supplied path against an allowed base folder before opening it. More about Path traversal.
Is CVE-2008-0196 being exploited?
There is no known exploitation of CVE-2008-0196 in the wild and no public exploit code.
Other vulnerabilities in Wordpress Wordpress
Sources
Also known as DEBIAN-CVE-2008-0196, GHSA-752f-j58r-mc8q.