CVE-2008-5322

N/A Unknown

Published: December 03, 2008 Modified: April 23, 2026

Description

Wysi Wiki Wyg 1.0 allows remote attackers to obtain system information via an invalid categup parameter to index.php, which calls the phpinfo function.

AI Explanation

Get an AI-powered plain-language explanation of this vulnerability and remediation steps.

References to Advisories, Solutions, and Tools

Patch Vendor Advisory Exploit Third Party Advisory

http://packetstormsecurity.org/0810-exploits/wysiwikiwyg-lfixssdisclose.txt

Source: cve@mitre.org

Exploit

http://secunia.com/advisories/31061

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/47105

Source: cve@mitre.org

https://www.exploit-db.com/exploits/6042

Source: cve@mitre.org

http://packetstormsecurity.org/0810-exploits/wysiwikiwyg-lfixssdisclose.txt

Source: af854a3a-2127-422b-91ae-364da2661108

Exploit

http://secunia.com/advisories/31061

Source: af854a3a-2127-422b-91ae-364da2661108

https://exchange.xforce.ibmcloud.com/vulnerabilities/47105

Source: af854a3a-2127-422b-91ae-364da2661108

https://www.exploit-db.com/exploits/6042

Source: af854a3a-2127-422b-91ae-364da2661108

8 reference(s) from NVD

Quick Stats

CVSS v3 Score

N/A / 10.0

EPSS (Exploit Probability)

5.1%

90th percentile

Exploitation Status

Not in CISA KEV

Weaknesses (CWE)

CWE-200

Affected Vendors

easy-script

Related CVEs