Information Disclosure in bbPress Product by Automattic
CVE-2011-3710

Currently unrated

Key Information:

Vendor

Bbpress

Status
Bbpress
Vendor
CVE Published:
23 September 2011

What is CVE-2011-3710?

The bbPress plugin version 1.0.2 is susceptible to a vulnerability that permits remote attackers to access sensitive information by directly requesting certain .php files. This flaw can lead to the exposure of the installation path within the error messages generated by the application, as evidenced by files such as bb-templates/kakumei/view.php. Such exposure can assist attackers in crafting more targeted attacks against the system.

References

http://www.openwall.com/lists/oss-security/2011/06/27/6
mailing-listx_refsource_MLIST
http://code.google.com/p/inspathx/source/browse/trunk/pat...
x_refsource_MISC
http://code.google.com/p/inspathx/source/browse/trunk/pat...
x_refsource_MISC

Timeline

  • Vulnerability Reserved

  • Vulnerability published

.