CVE-2008-2392

See a problem?
Please try reporting it to the source first.

Source

https://cve.org/CVERecord?id=CVE-2008-2392

Import Source

https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2008-2392.json

JSON Data

https://api.osv.dev/v1/vulns/CVE-2008-2392

Downstream

DEBIAN-CVE-2008-2392

Published

2008-05-21T13:24:00Z

Modified

2026-04-10T03:39:55.633685Z

Summary

[none]

Details

Unrestricted file upload vulnerability in WordPress 2.5.1 and earlier might allow remote authenticated administrators to upload and execute arbitrary PHP files via the Upload section in the Write Tabs area of the dashboard.

References

http://securityreason.com/securityalert/3897
http://www.securityfocus.com/archive/1/492230/100/0/threaded
http://www.securityfocus.com/bid/29276
https://exchange.xforce.ibmcloud.com/vulnerabilities/42561

CVE-2008-2392

Affected packages