UpHeron
All vulnerabilities

WordPress core

CVE-2008-0191

WordPress 2.2.x and 2.3.x allows remote attackers to obtain sensitive information via an invalid p parameter in an rss2 action to the default URI, which reveals the full path and the SQL database structure.

Severity
Medium 5.0
Published
10 Jan 2008
Last changed
16 Jun 2026
Added to UpHeron
17 Oct 2026
Sources
NVD

Affected software

SoftwareAffected versions
WordPressWordPress core · cpe:a:wordpress:wordpress
  • Version 2.2
  • Version 2.3

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2008-0191
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2008-0191