Vulnerabilities > CVE-2007-1409 - Information Disclosure vulnerability in WordPress

047910
CVSS 5.0 - MEDIUM
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
PARTIAL
Integrity impact
NONE
Availability impact
NONE
network
low complexity
wordpress
nessus
NVD
Published: 2007-03-10
Updated: 2018-10-16

Summary

WordPress allows remote attackers to obtain sensitive information via a direct request for wp-admin/admin-functions.php, which reveals the path in an error message.

Vulnerable Configurations

Part Description Count
Application
Wordpress
10

Nessus

NASL familyGentoo Local Security Checks
NASL idGENTOO_GLSA-200703-23.NASL
descriptionThe remote host is affected by the vulnerability described in GLSA-200703-23 (WordPress: Multiple vulnerabilities) WordPress contains cross-site scripting or cross-site scripting forgery vulnerabilities reported by: g30rg3_x in the
last seen2020-06-01
modified2020-06-02
plugin id24889
published2007-03-26
reporterThis script is Copyright (C) 2007-2019 and is owned by Tenable, Inc. or an Affiliate thereof.
sourcehttps://www.tenable.com/plugins/nessus/24889
titleGLSA-200703-23 : WordPress: Multiple vulnerabilities

References