Description

WordPress and WordPress MU before 2.8.1 allow remote attackers to obtain sensitive information via a direct request to wp-settings.php, which reveals the installation path in an error message.

Remediation

References

CVE-2009-2432

Related Vulnerabilities

MySQL CVE-2018-3145 Vulnerability (CVE-2018-3145)

Django Improper Authentication Vulnerability (CVE-2014-0482)

PHP Improper Resource Shutdown or Release Vulnerability (CVE-2015-3415)

WordPress Plugin Twitter Feed Cross-Site Scripting (2.0.4)

phpMyFAQ Failure to Sanitize Special Elements into a Different Plane (Special Element Injection) Vulnerability (CVE-2023-1758)

Severity

Medium

Classification

CVE-2009-2432 CWE-264

Tags

Missing Update Known Vulnerabilities