Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
WP-Cumulus Plug-in 1.20 for WordPress, and possibly other versions, allows remote attackers to obtain sensitive information via a crafted request to wp-cumulus.php, probably without parameters, which reveals the installation path in an error message.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Roy Tanck WP-Cumulus插件'wp-cumulus.php'信息泄露漏洞
Vulnerability Description
WordPress是一种使用PHP语言开发的博客平台，用户可以在支持PHP和MySQL 数据库的服务器上架设自己的网志。WordPress的WP-Cumulus Plug-in 1.20版本以及可能的其他版本允许远程攻击者借助一个对wp-cumulus.php的人工请求获得敏感信息。该请求不包含在一个错误信息中显示安装的参数。
CVSS Information
N/A
Vulnerability Type
N/A