Cross-site scripting (XSS) vulnerability in wp-admin/templates.php in WordPress 2.0.5 allows remote attackers to inject arbitrary web script or HTML via the file parameter. NOTE: some sources have reported this as a vulnerability in the get_file_description function in wp-admin/admin-functions.php.
References
Configurations
Configuration 1 (hide)
|
Information
Published : 2006-12-28 13:28
Updated : 2017-07-28 18:29
NVD link : CVE-2006-6808
Mitre link : CVE-2006-6808
JSON object : View
CWE
Products Affected
wordpress
- wordpress