Lucene search

K
ubuntucveUbuntu.comUB:CVE-2006-3389
HistoryJul 06, 2006 - 12:00 a.m.

CVE-2006-3389

2006-07-0600:00:00
ubuntu.com
ubuntu.com
9

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

0.01 Low

EPSS

Percentile

83.9%

index.php in WordPress 2.0.3 allows remote attackers to obtain sensitive
information, such as SQL table prefixes, via an invalid paged parameter,
which displays the information in an SQL error message. NOTE: this issue
has been disputed by a third party who states that the issue does not leak
any target-specific information.

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

0.01 Low

EPSS

Percentile

83.9%