CVE

Id
23898  
CVE No.
CVE-2007-0541  
Status
Candidate  
Description
WordPress allows remote attackers to determine the existence of arbitrary files, and possibly read portions of certain files, via pingback service calls with a source URI that corresponds to a local pathname, which triggers different fault codes for existing and non-existing files, and in certain configurations causes a brief file excerpt to be published as a blog comment.  
Phase
Assigned (20070129)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
232844 23898 CVE-2007-0541 BUGTRAQ:20070124 Multiple Remote Vulnerabilities in Wordpress  View
232845 23898 CVE-2007-0541 URL:http://www.securityfocus.com/archive/1/archive/1/458003/100/0/threaded  View
232846 23898 CVE-2007-0541 BUGTRAQ:20070124 Weaknesses in Pingback Design  View
232847 23898 CVE-2007-0541 URL:http://www.securityfocus.com/archive/1/archive/1/457996/100/0/threaded  View
232848 23898 CVE-2007-0541 SREASON:2191  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
56326 JVNDB-2007-005018 ZixForum におけるデータベースをダウンロードされる脆弱性 ZixForum は、不十分なアクセスコントロールで、重要な情報を Web ルート配下に格納するため、パスワードを含むデータベースをダウンロードされる脆弱性が存在します。 CVE-2007-0543 23898 9.4 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-005018.html  View