5

CVE-2006-3390

WordPress Core < 2.0.4 - Full Path Disclosure

WordPress 2.0.3 allows remote attackers to obtain the installation path via a direct request to various files, such as those in the (1) wp-admin, (2) wp-content, and (3) wp-includes directories, possibly due to uninitialized variables.
Mögliche Gegenmaßnahme
WordPress: Update to version 2.0.4, or a newer patched version
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Wordpress ≫ Wordpress Version2.0.3
Weitere Schwachstelleninformationen
SystemWordPress Core
≫
Produkt WordPress
Version *-2.0.3
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 2.81% 0.847
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 5 10 2.9
AV:N/AC:L/Au:N/C:P/I:N/A:N
Es wurden noch keine Informationen zu CWE veröffentlicht.
http://secunia.com/advisories/20928
Vendor Advisory
http://secunia.com/advisories/21447
http://security.gentoo.org/glsa/glsa-200608-19.xml
http://securityreason.com/securityalert/1187
http://www.securityfocus.com/archive/1/438942/100/0/threaded
http://www.securityfocus.com/archive/1/439062/100/0/threaded
http://www.securityfocus.com/bid/18779
http://www.vupen.com/english/advisories/2006/2661
https://www.wordfence.com/threat-intel/vulnerabilities/id/159b5565-f4d8-4514-9397-20b6a0890475
Third Party Advisory