Description

WordPress 2.2.x and 2.3.x allows remote attackers to obtain sensitive information via an invalid p parameter in an rss2 action to the default URI, which reveals the full path and the SQL database structure.

Remediation

References

CVE-2008-0191

Related Vulnerabilities

Jboss EAP Loop with Unreachable Exit Condition ('Infinite Loop') Vulnerability (CVE-2018-1041)

Beego Framework Improper Link Resolution Before File Access ('Link Following') Vulnerability (CVE-2021-27116)

WordPress Plugin Formidable Forms-Contact Form, Survey, Quiz, Calculator & Custom Form Builder Arbitrary File Upload (1.06.02)

WebLogic CVE-2019-2827 Vulnerability (CVE-2019-2827)

Jenkins Protection Mechanism Failure Vulnerability (CVE-2021-21690 )

Severity

Medium

Classification

CVE-2008-0191 CWE-200

Tags

Missing Update Known Vulnerabilities