NVD

Id
65351  
Name
CVE-2006-6808  
Description
Cross-site scripting (XSS) vulnerability in wp-admin/templates.php in WordPress 2.0.5 allows remote attackers to inject arbitrary web script or HTML via the file parameter. NOTE: some sources have reported this as a vulnerability in the get_file_description function in wp-admin/admin-functions.php.  
Reject
 
CVSS Version
2  
CVSS Score
6.8  
Severity
Medium  
CVSS Base Score
6.8  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:P/I:P/A:P)  
Pub Date
2016-12-20  
Published
2006-12-28  
Modified Date
2016-10-17  
Seq
2006-6808  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
340984 65351 CVE-2006-6808 20061227 WordPress Persistent XSS  View
340985 65351 CVE-2006-6808 http://michaeldaw.org/  View
340986 65351 CVE-2006-6808 GLSA-200701-10  View
340987 65351 CVE-2006-6808 http://trac.wordpress.org/changeset/4665  View
340988 65351 CVE-2006-6808 21782  View
340989 65351 CVE-2006-6808 ADV-2006-5191  View
340990 65351 CVE-2006-6808 wordpress-getfiledescription-xss(31133)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
61407 JVNDB-2006-003673 WordPress の wp-admin/templates.php におけるクロスサイトスクリプティングの脆弱性 WordPress の wp-admin/templates.php には、クロスサイトスクリプティングの脆弱性が存在します。 CVE-2006-6808 22910 CVE-2006-6808 65351 6.8 http://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-003673.html 2006-12-28 2012-12-20 View