Bugtraq mailing list archives
Re: WordPress 2.0.3 SQL Error and Full Path Disclosure
From: James Davis <jamesd () cert ja net>
Date: Tue, 04 Jul 2006 08:06:05 +0100
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 xzerox () linuxmail org wrote:
~ Full path ~ /wp-settings.php
...
/wp-includes/wp-db.php
I think you'll find that this isn't the full path to your Wordpress installation. Nor has it disclosed any information that's not contained within the directory structure of the Wordpress tarball. Regards, James - -- James Davis +44 1235 822 229 PGP: 0xC7C92EB7 JANET-CERT 0870 850 2340 (+44 1235 822 340) Atlas Centre, Chilton, Didcot, Oxfordshire, OX11 0QS -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.3 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iD8DBQFEqhNdIle3s8fJLrcRAnEdAKCpv7sHnSAUGAb0gu73o3dLQ2NLsgCgwnyQ 24wyJcTvppMc8iotCdybJIw= =ke0P -----END PGP SIGNATURE-----
Current thread:
- WordPress 2.0.3 SQL Error and Full Path Disclosure xzerox (Jul 03)
- Re: WordPress 2.0.3 SQL Error and Full Path Disclosure James Davis (Jul 04)
- Re: WordPress 2.0.3 SQL Error and Full Path Disclosure Jaroslaw Sajko (Jul 04)
- <Possible follow-ups>
- Re: WordPress 2.0.3 SQL Error and Full Path Disclosure zck zck (Jul 12)
- RE: WordPress 2.0.3 SQL Error and Full Path Disclosure Aaron Newman (Jul 13)
- Re: WordPress 2.0.3 SQL Error and Full Path Disclosure nate (Jul 15)
- RE: WordPress 2.0.3 SQL Error and Full Path Disclosure Aaron Newman (Jul 13)
- Re: WordPress 2.0.3 SQL Error and Full Path Disclosure jholguin (Jul 15)