CVE

Id
24766  
CVE No.
CVE-2007-1409  
Status
Candidate  
Description
WordPress allows remote attackers to obtain sensitive information via a direct request for wp-admin/admin-functions.php, which reveals the path in an error message.  
Phase
Assigned (20070310)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
245178 24766 CVE-2007-1409 BUGTRAQ:20070308 Re: Word Press Sensitive Directory exposure (SQL)  View
245179 24766 CVE-2007-1409 URL:http://www.securityfocus.com/archive/1/archive/1/462249/100/0/threaded  View
245180 24766 CVE-2007-1409 BUGTRAQ:20070308 Word Press Sensitive Directory exposure (SQL)  View
245181 24766 CVE-2007-1409 URL:http://www.securityfocus.com/archive/1/archive/1/462230/100/0/threaded  View
245182 24766 CVE-2007-1409 GENTOO:GLSA-200703-23  View
245183 24766 CVE-2007-1409 URL:http://www.gentoo.org/security/en/glsa/glsa-200703-23.xml  View
245184 24766 CVE-2007-1409 SECUNIA:24566  View
245185 24766 CVE-2007-1409 URL:http://secunia.com/advisories/24566  View
245186 24766 CVE-2007-1409 XF:wordpress-adminfunctions-sql-injection(32881)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
54803 JVNDB-2007-003495 PHP におけるバッファオーバーフローの脆弱性 PHP には、バッファオーバーフローの脆弱性が存在します。 CVE-2007-1411 24766 6.8 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-003495.html  View