CVE-2008-0194
EPSS 0.59%Published: 1/10/2008Modified: 5/27/2026
Description
Directory traversal vulnerability in wp-db-backup.php in WordPress 2.0.3 and earlier allows remote attackers to read arbitrary files, delete arbitrary files, and cause a denial of service via a .. (dot dot) in the backup parameter in a wp-db-backup.php action to wp-admin/edit.php. NOTE: this might be the same as CVE-2006-5705.1.
Affected packages (1)
- Debian/wordpressfrom 0, < 2.1.0-1