Lucene search
N/APATCHSTACK:7115FCC5B8FF875F5847293C66BBCCECHistoryMay 30, 2006 - 12:00 a.m.
WordPress <= 2.0.2 - Direct Static Code Injection
2006-05-3000:00:00
N/A
patchstack.com
5
0.128 Low
EPSS
Percentile
95.5%
Because of this vulnerability, the attackers can execute arbitrary commands by inserting a carriage return and PHP code when updating a profile, when it is appended after a special comment sequence into files.
Solution
Update the WordPress to the latest available version (at least 2.0.3).
Related
cvelist
cvelist
CVE-2006-2667
2006-05-30 21:00:00
ubuntucve
ubuntucve
CVE-2006-2667
2006-05-30 00:00:00
prion
prion
Code injection
2006-05-30 21:02:00
nvd
nvd
CVE-2006-2667
2006-05-30 21:02:00
cve
cve
CVE-2006-2667
2006-05-30 21:02:00
debiancve
debiancve
CVE-2006-2667
2006-05-30 21:02:00
openvas
openvas
Gentoo Security Advisory GLSA 200606-08 (wordpress)
2008-09-24 00:00:00
Gentoo Security Advisory GLSA 200606-08 (wordpress)
2008-09-24 00:00:00
nessus
nessus
GLSA-200606-08 : WordPress: Arbitrary command execution
2006-06-11 00:00:00
gentoo
gentoo
WordPress: Arbitrary command execution
2006-06-09 00:00:00