WordPress and WordPress MU before 2.8.1 allow remote attackers to obtain sensitive information via a direct request to wp-settings.php, which reveals the installation path in an error message.
Metrics
Affected Vendors & Products
References
History
No history.

Status: PUBLISHED
Assigner: mitre
Published:
Updated: 2024-08-07T05:52:14.765Z
Reserved: 2009-07-10T00:00:00
Link: CVE-2009-2432

No data.

Status : Deferred
Published: 2009-07-10T21:00:00.297
Modified: 2025-04-09T00:30:58.490
Link: CVE-2009-2432
