PT-2013-2559 · WordPress · Wp Php Widget Plugin

Publicado 2013-01-02 · Atualizado 2017-08-29 · CVE-2013-0721

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions WP PHP widget plugin version 1.0.2

Description The issue allows remote attackers to obtain sensitive information via a direct request. This is achieved by revealing the full path in an error message. No information is available about the estimated number of potentially affected devices or real-world incidents where this issue was exploited.

Recommendations For WP PHP widget plugin version 1.0.2, update to a version that fixes this issue, as the current version allows remote attackers to obtain sensitive information. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Information Disclosure

Enumeração de Fraquezas

CWE-200

Identificadores relacionados

CVE-2013-0721

Produtos afetados

Wp Php Widget Plugin

Referências · 5

• https://nvd.nist.gov/vuln/detail/CVE-2013-0721 · Nota de Segurança
• http://osvdb.org/88846 · Nota
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0721 · Nota
• http://osvdb.org/ref/88/wp-php-widget.txt · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/80906 · Nota