ID de Prueba:	1.3.6.1.4.1.25623.1.0.800124
Categoría:	Web application abuses
Título:	WordPress cat Parameter Directory Traversal Vulnerability
Resumen:	WordPress is prone to a directory traversal vulnerability.
Descripción:	Summary: WordPress is prone to a directory traversal vulnerability. Vulnerability Insight: The flaw is due to improper validation of input passed via cat parameter to index.php which is not properly sanitized in the get_category_template() function. Vulnerability Impact: Successful attack could lead to execution of arbitrary PHP code and can even access sensitive information. Affected Software/OS: WordPress 2.3.3 and earlier. Solution: Update to Version 2.5.1 or later. CVSS Score: 9.3 CVSS Vector: AV:N/AC:M/Au:N/C:C/I:C/A:C
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2008-4769 BugTraq ID: 28845 http://www.securityfocus.com/bid/28845 Debian Security Information: DSA-1871 (Google Search) http://www.debian.org/security/2009/dsa-1871 http://trac.wordpress.org/changeset/7586 http://www.juniper.fi/security/auto/vulnerabilities/vuln28845.html http://secunia.com/advisories/29949 XForce ISS Database: wordpress-cat-directory-traversal(41920) https://exchange.xforce.ibmcloud.com/vulnerabilities/41920
Copyright	Copyright (C) 2008 Greenbone AG

Esta es sólo una de 146377 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.