Information Disclosure Vulnerability in WordPress by Automattic
CVE-2009-2432

Currently unrated

Key Information:

Vendor
Wordpress
Status
WordPress
WordPress Mu
Vendor
CVE Published:
10 July 2009

Summary

Prior to version 2.8.1, WordPress and WordPress MU are susceptible to a vulnerability that allows remote attackers to access sensitive system information. Exploiting this flaw involves sending a direct request to the wp-settings.php file, which can inadvertently expose the installation path of the WordPress site through an error message. This information may assist attackers in planning further attacks, making it crucial for users to update to secured versions to mitigate potential risks.

References

http://corelabs.coresecurity.com/index.php?action=view&ty...
x_refsource_MISC
http://www.securityfocus.com/archive/1/504795/100/0/threaded
mailing-listx_refsource_BUGTRAQ
http://securitytracker.com/id?1022528
vdb-entryx_refsource_SECTRACK

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.