CVE-2008-0666: Website Meta Language

Low severity, CVSS 3.6. EPSS: 0.4% chance of exploitation in the next 30 days.

Website META Language (WML) 2.0.11 allows local users to overwrite arbitrary files via a symlink attack on (1) the /tmp/pe.tmp.$$ temporary file used by wml_contrib/wmg.cgi and (2) temporary files used by wml_backend/p3_eperl/eperl_sys.c.

Affected products

• Website Meta Language Website Meta Language: version 2.0.11 only

Published 2008-02-11. Last modified 2026-06-16.