CVE-2011-3818 WordPress Multiple Path Disclosure Vulnerabilities

WordPress is an open source blogging tool and content management system based on PHP and MySQL. It has many features including a plug-in architecture and a template system.

WordPress could allow a remote attacker to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by wp-admin/includes/user.php and certain other files.

Affected Versions:
WordPress 2.9.2 and 3.0.4

QID Detection Logic:
This unauthenticated QID launches a HTTP GET request to the WordPress directories and reviews the target's response.

An unauthenticated, remote attacker could exploit this vulnerability to gain access to sensitive information and launch further attacks against the affected system.

Customers are advised to install WordPress 3.0.5 or later versions to remediate the vulnerabilities.

Patch:
Following are links for downloading patches to fix the vulnerabilities:

WordPress 3.0.5 or later