Description

WordPress 2.0.3 allows remote attackers to obtain the installation path via a direct request to various files, such as those in the (1) wp-admin, (2) wp-content, and (3) wp-includes directories, possibly due to uninitialized variables.

Remediation

References

CVE-2006-3390

Related Vulnerabilities

Dolibarr Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2021-33618)

Joomla! Core 3.x.x Cross-Site Scripting (3.0.0 - 3.9.27)

WordPress Plugin Blog2Social:Social Media Auto Post & Scheduler Unspecified Vulnerability (5.1.2)

WordPress Plugin Hellodialog Unspecified Vulnerability (1.0.2)

Open Resty Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2018-9230)

Severity

Medium

Classification

CVE-2006-3390

Tags

Missing Update Known Vulnerabilities