CVE-2008-0191
MEDIUM 5.0EPSS 2.6%
WordPress 2.2.x and 2.3.x allows remote attackers to obtain sensitive information via an invalid p parameter in an rss2 action to the default URI, which reveals the full path and the SQL database structure.
- CVSS v2.0
- 5.0 MEDIUM
AV:N/AC:L/Au:N/C:P/I:N/A:N - EPSS
- 2.58% chance of exploitation in the next 30 days, 84th percentile
- Nuclei
- medium
- Published
- 2008-01-10
- Updated
- 2024-08-07