CVE-2008-0191

2008-01-1000:46:00

Debian Security Bug Tracker

security-tracker.debian.org

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

0.006 Low

EPSS

Percentile

78.2%

JSON

WordPress 2.2.x and 2.3.x allows remote attackers to obtain sensitive information via an invalid p parameter in an rss2 action to the default URI, which reveals the full path and the SQL database structure.

OSVersionArchitecturePackageVersionFilename
Debian12allwordpress<= 6.1.6+dfsg1-0+deb12u1wordpress_6.1.6+dfsg1-0+deb12u1_all.deb
Debian11allwordpress<= 5.7.11+dfsg1-0+deb11u1wordpress_5.7.11+dfsg1-0+deb11u1_all.deb
Debian999allwordpress<= 6.5.5+dfsg1-1wordpress_6.5.5+dfsg1-1_all.deb
Debian13allwordpress<= 6.5.3+dfsg1-1wordpress_6.5.3+dfsg1-1_all.deb

OS	Version	Architecture	Package	Version	Filename
Debian	12	all	wordpress	<= 6.1.6+dfsg1-0+deb12u1	wordpress_6.1.6+dfsg1-0+deb12u1_all.deb
Debian	11	all	wordpress	<= 5.7.11+dfsg1-0+deb11u1	wordpress_5.7.11+dfsg1-0+deb11u1_all.deb
Debian	999	all	wordpress	<= 6.5.5+dfsg1-1	wordpress_6.5.5+dfsg1-1_all.deb
Debian	13	all	wordpress	<= 6.5.3+dfsg1-1	wordpress_6.5.3+dfsg1-1_all.deb