Lucene search

K
ubuntucveUbuntu.comUB:CVE-2010-4403
HistoryDec 06, 2010 - 12:00 a.m.

CVE-2010-4403

2010-12-0600:00:00
ubuntu.com
ubuntu.com
7

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

0.003 Low

EPSS

Percentile

69.0%

The Register Plus plugin 3.5.1 and earlier for WordPress allows remote
attackers to obtain sensitive information via a direct request to (1)
dash_widget.php and (2) register-plus.php, which reveals the installation
path in an error message.

Notes

Author Note
jdstrand code not present: wp-content/plugins/register-plus/register-plus.php

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

0.003 Low

EPSS

Percentile

69.0%