Description

WordPress 2.2.x and 2.3.x allows remote attackers to obtain sensitive information via an invalid p parameter in an rss2 action to the default URI, which reveals the full path and the SQL database structure.

Remediation

References

CVE-2008-0191

Related Vulnerabilities

MediaWiki Improper Privilege Management Vulnerability (CVE-2020-10534)

Ampache Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2024-51489)

WordPress Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2019-16217)

WordPress Plugin Thrive Dashboard Security Bypass (2.3.9.2)

WordPress Plugin Two Way CHAT-Send or receive messages to your user Multiple Vulnerabilities (3.1.4)

Severity

Medium

Classification

CVE-2008-0191 CWE-200

Tags

Missing Update Known Vulnerabilities