Lucene search

K
patchstackR00tPATCHSTACK:3A557A3B108A506D4AE882928D182B95
HistoryMar 10, 2007 - 12:00 a.m.

WordPress <= 2.1.2 - Sensitive Directory Exposure

2007-03-1000:00:00
r00t
patchstack.com
4

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

Because of this vulnerability, the attackers can obtain sensitive information via a direct request for wp-admin/admin-functions.php, which reveals the path in an error message.

Solution

           Update the WordPress to the latest available version (at least 2.1.3).
CPENameOperatorVersion
wordpressle2.1.2

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

Related for PATCHSTACK:3A557A3B108A506D4AE882928D182B95