CVE

Id
19494  
CVE No.
CVE-2006-3390  
Status
Candidate  
Description
WordPress 2.0.3 allows remote attackers to obtain the installation path via a direct request to various files, such as those in the (1) wp-admin, (2) wp-content, and (3) wp-includes directories, possibly due to uninitialized variables.  
Phase
Assigned (20060706)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
175146 19494 CVE-2006-3390 BUGTRAQ:20060702 WordPress 2.0.3 SQL Error and Full Path Disclosure  View
175147 19494 CVE-2006-3390 URL:http://www.securityfocus.com/archive/1/archive/1/438942/100/0/threaded  View
175148 19494 CVE-2006-3390 BUGTRAQ:20060704 Re: WordPress 2.0.3 SQL Error and Full Path Disclosure  View
175149 19494 CVE-2006-3390 URL:http://www.securityfocus.com/archive/1/archive/1/439062/100/0/threaded  View
175150 19494 CVE-2006-3390 GENTOO:GLSA-200608-19  View
175151 19494 CVE-2006-3390 URL:http://security.gentoo.org/glsa/glsa-200608-19.xml  View
175152 19494 CVE-2006-3390 BID:18779  View
175153 19494 CVE-2006-3390 URL:http://www.securityfocus.com/bid/18779  View
175154 19494 CVE-2006-3390 VUPEN:ADV-2006-2661  View
175155 19494 CVE-2006-3390 URL:http://www.vupen.com/english/advisories/2006/2661  View
175156 19494 CVE-2006-3390 SECUNIA:20928  View
175157 19494 CVE-2006-3390 URL:http://secunia.com/advisories/20928  View
175158 19494 CVE-2006-3390 SECUNIA:21447  View
175159 19494 CVE-2006-3390 URL:http://secunia.com/advisories/21447  View
175160 19494 CVE-2006-3390 SREASON:1187  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
58683 JVNDB-2006-000948 Webmin および Usermin の simplify_path() 関数における任意のファイルを読み込みが可能な脆弱性 Webmin および Usermin には、simplify_path() 関数の URL 処理に不備が存在するため、特定の URL を利用することで、リモートから任意のファイルが読み取られる脆弱性が存在します。 CVE-2006-3392 19494 5 http://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-000948.html  View