CVE-2006-4028

2006-08-0920:04:00

[email protected]

web.nvd.nist.gov

wordpress

version 2.0.4

vulnerabilities

remote attack vectors

user registration

10 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

6.7 Medium

AI Score

Confidence

Low

0.017 Low

EPSS

Percentile

87.7%

JSON

Multiple unspecified vulnerabilities in WordPress before 2.0.4 have unknown impact and remote attack vectors. NOTE: due to lack of details, it is not clear how these issues are different from CVE-2006-3389 and CVE-2006-3390, although it is likely that 2.0.4 addresses an unspecified issue related to “Anyone can register” functionality (user registration for guests).

Affected configurations

NVD

Node

wordpresswordpressMatch2.0

wordpresswordpressMatch2.0.1

wordpresswordpressMatch2.0.2

wordpresswordpressMatch2.0.3

CPENameOperatorVersion
wordpress:wordpresswordpresseq2.0
wordpress:wordpresswordpresseq2.0.1
wordpress:wordpresswordpresseq2.0.2
wordpress:wordpresswordpresseq2.0.3