CVE-2007-2484

Currently unrated

Key Information:

Vendor
Wordpress
Status
WP-table
Vendor
CVE Published:
3 May 2007

Summary

PHP remote file inclusion vulnerability in js/wptable-button.php in the wp-Table 1.43 and earlier plugin for WordPress, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the wpPATH parameter.

References

https://www.exploit-db.com/exploits/3824
exploitx_refsource_EXPLOIT-DB
http://secunia.com/advisories/25063
third-party-advisoryx_refsource_SECUNIA
http://osvdb.org/34357
vdb-entryx_refsource_OSVDB

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.