CVE-2008-2146

wp-includes/vars.php in Wordpress before 2.2.3 does not properly extract the current path from the PATH_INFO ($PHP_SELF), which allows remote attackers to…

published May 12, 2008

CVSS
—
EPSS
3%
Percentile
86.0
In the wild
Unconfirmed
What it is

wp-includes/vars.php in Wordpress before 2.2.3 does not properly extract the current path from the PATH_INFO ($PHP_SELF), which allows remote attackers to bypass intended access restrictions for certain pages.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02734 · 86.0th percentile
Published
2008-05-12T20:00Z
EPSS history
Timeline
  • 12 MAY 20:00Z
    wp-includes/vars.php in Wordpress before 2.2.3 does not properly extract the current path from the PATH_INFO ($PHP_SELF), which allows remote attackers to…
    cvelistv5