CVE-2009-2432

Currently unrated

Key Information:

Vendor
Wordpress
Status
WordPress
WordPress Mu
Vendor
CVE Published:
10 July 2009

Summary

WordPress and WordPress MU before 2.8.1 allow remote attackers to obtain sensitive information via a direct request to wp-settings.php, which reveals the installation path in an error message.

References

http://corelabs.coresecurity.com/index.php?action=view&ty...
x_refsource_MISC
http://www.securityfocus.com/archive/1/504795/100/0/threaded
mailing-listx_refsource_BUGTRAQ
http://securitytracker.com/id?1022528
vdb-entryx_refsource_SECTRACK

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.