WordPress CVEs

Description

index.php in WordPress 2.0.3 allows remote attackers to obtain sensitive information, such as SQL table prefixes, via an invalid paged parameter, which displays the information in an SQL error message. NOTE: this issue has been disputed by a third party who states that the issue does not leak any target-specific information.

Affected WordPress components

• WordPress core
  Confirmed match
  Version 2.0.3

A confirmed match is backed by the plugin or theme slug. A possible match is based on the product name only and should be verified.

Affected products and versions

• n/a n/a — Versions not specified
• wordpress wordpress — Version 2.0.3

References

• secunia.com http://secunia.com/advisories/20928 Vendor Advisory
• secunia.com http://secunia.com/advisories/21447
• security.gentoo.org http://security.gentoo.org/glsa/glsa-200608-19.xml
• securityreason.com http://securityreason.com/securityalert/1187
• www.securityfocus.com http://www.securityfocus.com/archive/1/438942/100/0/threaded
• www.securityfocus.com http://www.securityfocus.com/archive/1/439031/100/0/threaded
• www.securityfocus.com http://www.securityfocus.com/archive/1/439062/100/0/threaded
• www.securityfocus.com http://www.securityfocus.com/archive/1/440127/100/0/threaded
• www.securityfocus.com http://www.securityfocus.com/bid/18779
• www.vupen.com http://www.vupen.com/english/advisories/2006/2661
• nvd.nist.gov Official NVD record