CVE-2008-2146
12.05.2008, 20:20
wp-includes/vars.php in Wordpress before 2.2.3 does not properly extract the current path from the PATH_INFO ($PHP_SELF), which allows remote attackers to bypass intended access restrictions for certain pages.Enginsight
| Vendor | Product | Version |
|---|---|---|
| wordpress | wordpress | 𝑥 ≤ 2.2.2 |
| wordpress | wordpress | 0.6.2 |
| wordpress | wordpress | 0.6.2.1 |
| wordpress | wordpress | 0.7 |
| wordpress | wordpress | 0.71 |
| wordpress | wordpress | 0.711 |
| wordpress | wordpress | 1.0 |
| wordpress | wordpress | 1.0.1 |
| wordpress | wordpress | 1.0.2 |
| wordpress | wordpress | 1.2 |
| wordpress | wordpress | 1.2.1 |
| wordpress | wordpress | 1.2.2 |
| wordpress | wordpress | 1.3.1 |
| wordpress | wordpress | 1.4 |
| wordpress | wordpress | 1.5 |
| wordpress | wordpress | 1.5-strayhorn |
| wordpress | wordpress | 1.5.1 |
| wordpress | wordpress | 1.5.1.1 |
| wordpress | wordpress | 1.5.1.2 |
| wordpress | wordpress | 1.5.1.3 |
| wordpress | wordpress | 1.5.2 |
| wordpress | wordpress | 1.6 |
| wordpress | wordpress | 2.0 |
| wordpress | wordpress | 2.0.1 |
| wordpress | wordpress | 2.0.2 |
| wordpress | wordpress | 2.0.3 |
| wordpress | wordpress | 2.0.4 |
| wordpress | wordpress | 2.0.5 |
| wordpress | wordpress | 2.0.6 |
| wordpress | wordpress | 2.0.7 |
| wordpress | wordpress | 2.0.8 |
| wordpress | wordpress | 2.0.9 |
| wordpress | wordpress | 2.0.10 |
| wordpress | wordpress | 2.0.10_rc1:_rc1 |
| wordpress | wordpress | 2.0.10_rc2:_rc2 |
| wordpress | wordpress | 2.0.11 |
| wordpress | wordpress | 2.1 |
| wordpress | wordpress | 2.1.1 |
| wordpress | wordpress | 2.1.2 |
| wordpress | wordpress | 2.1.3 |
| wordpress | wordpress | 2.1.3_rc1:_rc1 |
| wordpress | wordpress | 2.1.3_rc2:_rc2 |
| wordpress | wordpress | 2.2 |
| wordpress | wordpress | 2.2.0 |
| wordpress | wordpress | 2.2.1 |
| wordpress | wordpress | 2.2_revision5002:_revision5002 |
| wordpress | wordpress | 2.2_revision5003:_revision5003 |
𝑥
= Vulnerable software versions
Debian Releases
Ubuntu Releases
Common Weakness Enumeration
References