Description
WordPress 2.2.x and 2.3.x allows remote attackers to obtain sensitive information via an invalid p parameter in an rss2 action to the default URI, which reveals the full path and the SQL database structure.
Remediation
References
Related Vulnerabilities
Joomla! Core 1.7.x Cross-Site Scripting (1.7.0 - 1.7.2)
Oracle Database Server CVE-2006-0261 Vulnerability (CVE-2006-0261)
WordPress Plugin WP to Twitter Cross-Site Scripting (3.0.5)
Oracle Database Server CVE-2007-5512 Vulnerability (CVE-2007-5512)
WordPress Plugin Woo Custom Checkout Field Multiple Vulnerabilities (1.3.2)