What is CVE-2008-2392?

CVE-2008-2392 is a vulnerability in Wordpress, classified under Improper Input Validation. Published 2008-05-21.

Is CVE-2008-2392 known to be exploited?

1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.

Improper input validation in Wordpress

CVE-2008-2392

Unrestricted file upload vulnerability in WordPress 2.5.1 and earlier might allow remote authenticated administrators to upload and execute arbitrary PHP files via the Upload section in the Write Tabs area of the dashboard.

Vulnerability class: Drupalgeddon 2 (CVE-2018-7600)

EPSS: 0.043 (90.1th percentile) — read the EPSS interpretation.

Affected products

Wordpress
N/a — versions n/a

Weakness classification (CWE)

CWE-20 — Improper Input Validation

Public proof-of-concept exploits

20142995/nuclei-templates

References

cve@mitre.org (Third Party Advisory, x_refsource_SREASON, third-party-advisory)
cve@mitre.org (mailing-list, x_refsource_BUGTRAQ, VDB Entry, Third Party Advisory)
cve@mitre.org (VDB Entry, Third Party Advisory, vdb-entry, x_refsource_BID)
cve@mitre.org (VDB Entry, Third Party Advisory, vdb-entry, x_refsource_XF)

Frequently asked questions

What is CVE-2008-2392?: CVE-2008-2392 is a vulnerability in Wordpress, classified under Improper Input Validation. Published 2008-05-21.
Is CVE-2008-2392 known to be exploited?: 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.