bugtraq - Re: WordPress 2.0.3 SQL Error and Full Path Disclosure

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Date: Tue, 04 Jul 2006 08:06:05 +0100
From: James Davis <jamesd@...t.ja.net>
To: bugtraq@...urityfocus.com
Cc: xzerox@...uxmail.org
Subject: Re: WordPress 2.0.3 SQL Error and Full Path Disclosure


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

xzerox@...uxmail.org wrote:

> ~ Full path ~
>
> /wp-settings.php
...
> /wp-includes/wp-db.php

I think you'll find that this isn't the full path to your Wordpress
installation. Nor has it disclosed any information that's not contained
within the directory structure of the Wordpress tarball.

Regards,

James

- --
James Davis	+44 1235 822 229	PGP: 0xC7C92EB7
JANET-CERT	0870 850 2340	(+44 1235 822 340)
		Atlas Centre, Chilton, Didcot, Oxfordshire, OX11 0QS
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.3 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iD8DBQFEqhNdIle3s8fJLrcRAnEdAKCpv7sHnSAUGAb0gu73o3dLQ2NLsgCgwnyQ
24wyJcTvppMc8iotCdybJIw=
=ke0P
-----END PGP SIGNATURE-----