Description

WordPress 2.0.3 allows remote attackers to obtain the installation path via a direct request to various files, such as those in the (1) wp-admin, (2) wp-content, and (3) wp-includes directories, possibly due to uninitialized variables.

Remediation

References

CVE-2006-3390

Related Vulnerabilities

WordPress Plugin Broken Link Checker Cross-Site Scripting (1.11.8)

Oracle Database Server CVE-2006-5338 Vulnerability (CVE-2006-5338)

WordPress Plugin Email newsletter 'option' Parameter Information Disclosure (8.0)

WordPress Plugin Product Feed on WooCommerce for Google, Awin, Shareasale, Bing, and More SQL Injection (3.3.0.3)

PHP Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability (CVE-2016-4544)

Severity

Medium

Tags

Missing Update Known Vulnerabilities CVE-2006-3390