PT-2006-2787 · Microsoft · Internet Explorer

Noam Rathaus · Publicado 2006-04-17 · Atualizado 2008-09-05 · CVE-2006-1796

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Média

Vetor base

AV:N/AC:M/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Wordpress versions 1.5.2 through 2.0.1

Description A cross-site scripting (XSS) issue exists in the paging links functionality, allowing remote attackers to inject arbitrary web script or HTML to Internet Explorer users via the REQUEST URI in the request URI.

Recommendations For Wordpress versions 1.5.2 through 2.0.1, update to a version after 2.0.1 to resolve the issue.

Correção

Identificadores relacionados

CVE-2006-1796

Produtos afetados

Internet Explorer

Referências · 7

• https://osv.dev/vulnerability/CVE-2006-1796 · Aviso do Fabricante
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-1796 · Nota
• https://security-tracker.debian.org/tracker/CVE-2006-1796 · Aviso do Fabricante
• https://osv.dev/vulnerability/DEBIAN-CVE-2006-1796 · Aviso do Fabricante
• http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=328909 · Correção
• http://trac.wordpress.org/ticket/1686 · Correção
• https://nvd.nist.gov/vuln/detail/CVE-2006-1796 · Nota de Segurança