WordPress Attack Scanner Plugin Multiple Information Disclosure Vulnerabilities

Bugtraq ID:	57648
Class:	Input Validation Error
CVE:
Remote:	Yes
Local:	No
Published:	Jan 29 2013 12:00AM
Updated:	Jan 29 2013 12:00AM
Credit:	MustLive
Vulnerable:	Attack Scanner Attack Scanner 0
Not Vulnerable:

WordPress Attack Scanner Plugin Multiple Information Disclosure Vulnerabilities

The Attack Scanner plugin for WordPress is prone to multiple information-disclosure vulnerabilities because it fails to properly restrict access.

An attacker can exploit these issues to obtain sensitive information that may aid in further attacks.

WordPress Attack Scanner Plugin Multiple Information Disclosure Vulnerabilities

An attacker can exploit these issues through a browser.

WordPress Attack Scanner Plugin Multiple Information Disclosure Vulnerabilities

Solution:
Currently, we are not aware of any vendor-supplied patches. If you feel we are in error or are aware of more recent information, please mail us at: [email protected].

WordPress Attack Scanner Plugin Multiple Information Disclosure Vulnerabilities

References:

• Attack Scanner Homepage (Attack Scanner)
  
• Vulnerabilities in WordPress Attack Scanner for WordPress (seclists.org)