Skip to main content
← All vulnerabilities
CVE-2008-5322

Wysi Wiki Wyg 1.0 allows remote attackers to obtain system information via an invalid categup parameter to index.php, which calls the phpinf

Published
Last modified
published
Not listed in CISA KEV
1 on Exploit-DB

Summary

Wysi Wiki Wyg 1.0 allows remote attackers to obtain system information via an invalid categup parameter to index.php, which calls the phpinfo function.

Timeline

  1. Public exploit on Exploit-DB

    EDB-6042

  2. CVE published
  3. Record last updated

Affected versions

  • n/a n/a

    Version range not reported

References 4

packetstormsecurity.org

exchange.xforce.ibmcloud.com

secunia.com

Exploit-DB