Description

WordPress 2.0.3 allows remote attackers to obtain the installation path via a direct request to various files, such as those in the (1) wp-admin, (2) wp-content, and (3) wp-includes directories, possibly due to uninitialized variables.

Remediation

References

CVE-2006-3390

Related Vulnerabilities

Joomla Improper Input Validation Vulnerability (CVE-2020-35616)

Oracle HTTP Server Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability (CVE-2019-3822)

Oracle JRE CVE-2012-0497 Vulnerability (CVE-2012-0497)

PHP Out-of-bounds Read Vulnerability (CVE-2019-11050)

Apache HTTP Server Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2019-10092)

Severity

Medium

Classification

CVE-2006-3390

Tags

Missing Update Known Vulnerabilities