CVE-2006-3390

WordPress 2.0.3 is affected: a vulnerability allows remote attackers to disclose the installation path via direct requests to files in wp-admin, wp-content, and wp-includes (likely due to uninitialized variables). The issue is described for CVE-2006-3390 (and related CVEs) with impact on confiden...