CVE-2008-0195: Infoleak
Published Jan 10, 2008
·Updated
WordPress 2.0.11 and earlier allows remote attackers to obtain sensitive information via an empty value of the page parameter to certain PHP scripts under wp-admin/, which reveals the path in various error messages.
Affected Software
1 affected component
WordPress<=2.0.11
Event History
Jan 10, 2008
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2008-0195?
CVE-2008-0195 is considered a moderate severity vulnerability as it can lead to the exposure of sensitive information.
2
How do I fix CVE-2008-0195?
To fix CVE-2008-0195, upgrade to WordPress version 2.0.12 or later where this vulnerability is patched.
3
What type of information can be leaked by CVE-2008-0195?
CVE-2008-0195 can leak the path information through error messages when the page parameter is empty.
4
Which versions of WordPress are affected by CVE-2008-0195?
CVE-2008-0195 affects WordPress versions 2.0.11 and earlier.
5
How can remote attackers exploit CVE-2008-0195?
Remote attackers can exploit CVE-2008-0195 by sending requests with an empty page parameter to certain PHP scripts under wp-admin/.