CVE-2003-1599 on Ubuntu 12.04 LTS (precise) - medium.
Description:
WordPress 0.7 allows remote execution of commands. / Wp-links / links.all.php. An attacker can inject a url in $ abspath and get remote execution of commands with the privileges of the server web (usually nobody).