Bugtraq mailing list archives

Re: WordPress 2.0.3 SQL Error and Full Path Disclosure


From: James Davis <jamesd () cert ja net>
Date: Tue, 04 Jul 2006 08:06:05 +0100

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

xzerox () linuxmail org wrote:

~ Full path ~

/wp-settings.php
...
/wp-includes/wp-db.php

I think you'll find that this isn't the full path to your Wordpress
installation. Nor has it disclosed any information that's not contained
within the directory structure of the Wordpress tarball.

Regards,

James

- --
James Davis     +44 1235 822 229        PGP: 0xC7C92EB7
JANET-CERT      0870 850 2340   (+44 1235 822 340)
                Atlas Centre, Chilton, Didcot, Oxfordshire, OX11 0QS
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.3 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iD8DBQFEqhNdIle3s8fJLrcRAnEdAKCpv7sHnSAUGAb0gu73o3dLQ2NLsgCgwnyQ
24wyJcTvppMc8iotCdybJIw=
=ke0P
-----END PGP SIGNATURE-----


Current thread: