Description

Wordpress 1.5 and earlier allows remote attackers to obtain sensitive information via a direct request to files in (1) wp-content/themes/, (2) wp-includes/, or (3) wp-admin/, which reveal the path in an error message.

Remediation

References

CVE-2005-1688

Related Vulnerabilities

Contao Improper Input Validation Vulnerability (CVE-2020-25768)

WordPress Plugin Docket Cache-Object Cache Accelerator Cross-Site Scripting (21.08.01)

PHP Other Vulnerability (CVE-2003-0442)

WordPress Plugin Warranties and Returns for WooCommerce Security Bypass (5.2.1)

PHP Other Vulnerability (CVE-2006-1490)

Severity

Medium

Classification

CVE-2005-1688 CWE-425

Tags

Missing Update Known Vulnerabilities