CVE-2007-2483

Currently unrated

Key Information:

Vendor
Wordpress
Status
WP-table
Vendor
CVE Published:
3 May 2007

Summary

Directory traversal vulnerability in js/wptable-button.php in the wp-Table 1.43 and earlier plugin for WordPress, when register_globals is enabled, allows remote attackers to include and execute arbitrary local files via the wpPATH parameter.

References

https://www.exploit-db.com/exploits/3824
exploitx_refsource_EXPLOIT-DB
http://secunia.com/advisories/25063
third-party-advisoryx_refsource_SECUNIA
http://osvdb.org/37297
vdb-entryx_refsource_OSVDB

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.