PT-2012-2868 · WordPress +1 · Wordpress +1

Name of the Vulnerable Software and Affected Versions: WordPress versions 3.3.1 and earlier Description: The issue allows remote attackers to inject arbitrary web script or HTML via the dbhost, dbname, or uname parameters in the wp-admin/setup-config.php file. The vendor disputes the significance...

PollHelper - Remote Configuration File Disclosure

PollHelper - Remote Configuration File Disclosure Remote Config File Disclosure ---------------------------------------------------- script: PollHelper download from:http://www.freedville.com/oss/PollHelper.zip vul: www.site.com/path/poll.inc ............................... $dbhost = "";...