Vulnerable Systems:
* Floating Tweets Plugin for WordPress 1.0.1
Floating Tweets Plugin for WordPress contains a flaw that may lead to an unauthorized information disclosure. The issue is triggered when a remote attacker sends malformed input to the skin.php script, which discloses the software's installation path resulting in a loss of confidentiality. While such information is relatively low risk, it is often useful in carrying out additional, more focused attacks.
Disclosure Timeline:
Disclosure Date :2013-01-11
Vendor Informed Date :2012-08-31
Exploit Publish Date :2013-01-11
