FreeBSD VuXML: Documenting security issues in FreeBSD and the FreeBSD Ports Collection

wordpress -- full path disclosure

Affected packages
wordpress < 1.5.2

Details

VuXML ID e0b342a1-d2ae-11da-a672-000e0c2e438a
Discovery 2005-12-20
Entry 2006-04-23

Dedi Dwianto reports:

A remote user can access the file directly to cause the system to display an error message that indicates the installation path. The resulting error message will disclose potentially sensitive installation path information to the remote attacker.

References

CVE Name CVE-2005-4463
URL http://echo.or.id/adv/adv24-theday-2005.txt