Lucene search

MitreCVE-2006-0733

HistoryFeb 16, 2006 - 11:02 a.m.

CVE-2006-0733

2006-02-1611:02:00

mitre

web.nvd.nist.gov

cve-2006-0733

xss

wordpress

remote attackers

web script

html

onfocus

onblur

author's website

vulnerability

nvd

CVSS2

2.6

Attack Vector

NETWORK

Attack Complexity

HIGH

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:H/Au:N/C:N/I:P/A:N

AI Score

5.6

Confidence

High

EPSS

0.004

Percentile

72.6%

JSON

Cross-site scripting (XSS) vulnerability in WordPress 2.0.0 allows remote attackers to inject arbitrary web script or HTML via scriptable attributes such as (1) onfocus and (2) onblur in the “author’s website” field. NOTE: followup comments to the researcher’s web log suggest that this issue is only exploitable by the same user who injects the XSS, so this might not be a vulnerability

Affected configurations

Nvd

Node

wordpresswordpressMatch2.0

VendorProductVersionCPE
wordpresswordpress2.0cpe:2.3:a:wordpress:wordpress:2.0:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
wordpress	wordpress	2.0	cpe:2.3:a:wordpress:wordpress:2.0:::::::*

References

myimei.com/security/2006-02-15/wordpress200autors-websitexss-attack.html

www.securityfocus.com/archive/1/425043/100/0/threaded

www.securityfocus.com/bid/16656

exchange.xforce.ibmcloud.com/vulnerabilities/24736

CVSS2

2.6

Attack Vector

NETWORK

Attack Complexity

HIGH

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:H/Au:N/C:N/I:P/A:N

AI Score

5.6

Confidence

High

EPSS

0.004

Percentile

72.6%

JSON

Related for CVE-2006-0733