CVE-2007-2482

MEDIUM 6.8CVE-2007-2482 · Published 03/05/2007 · updated 16/06/2026

In short

CVE-2007-2482 is a MEDIUM (CVSS 6.8) vulnerability affecting wordtube (ruben boelinger).
Chance of exploitation in the next 30 days (EPSS): 8.6%, higher than 95.1% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
wordtube ruben_boelinger	`≤ 1.43`	No fix yet

Description

Directory traversal vulnerability in wordtube-button.php in the wordTube 1.43 and earlier plugin for WordPress, when register_globals is enabled, allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the wpPATH parameter.

References

advisories.echo.or.id/adv/adv81-K-159-2007.txt
alexrabe.boelinger.com · Exploit
osvdb.org/45168
secunia.com/advisories/25074 · Patch
securityreason.com/securityalert/2660
exploit-db.com/exploits/3825
securityfocus.com/archive/1/467362/100/0/threaded
securityfocus.com/bid/23737 · Exploit
vupen.com/english/advisories/2007/1615
exchange.xforce.ibmcloud.com/vulnerabilities/33996

More vulnerabilities in wordtube

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free