Description

wp-admin/upgrade.php in WordPress, probably 2.6.x, allows remote attackers to upgrade the application, and possibly cause a denial of service (application outage), via a direct request.

Remediation

References

CVE-2008-6767

Related Vulnerabilities

PHP Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2007-4782)

WordPress Plugin Wise Agent Lead Capture Forms Cross-Site Scripting (1.0)

OpenVPN AS Other Vulnerability (CVE-2006-1629)

Drupal Core 9.1.x Multiple Security Bypass Vulnerabilities (9.1.0 - 9.1.12)

Drupal Other Vulnerability (CVE-2005-3974)

Severity

Critical

Classification

CVE-2008-6767

Tags

Missing Update Known Vulnerabilities