CVE-2006-4028

2006-08-0920:04:00

mitre

web.nvd.nist.gov

wordpress

version 2.0.4

vulnerabilities

remote attack vectors

user registration

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

AI Score

6.7

Confidence

Low

EPSS

0.017

Percentile

87.7%

JSON

Multiple unspecified vulnerabilities in WordPress before 2.0.4 have unknown impact and remote attack vectors. NOTE: due to lack of details, it is not clear how these issues are different from CVE-2006-3389 and CVE-2006-3390, although it is likely that 2.0.4 addresses an unspecified issue related to “Anyone can register” functionality (user registration for guests).

Affected configurations

Nvd

Node

wordpresswordpressMatch2.0

wordpresswordpressMatch2.0.1

wordpresswordpressMatch2.0.2

wordpresswordpressMatch2.0.3

VendorProductVersionCPE
wordpresswordpress2.0cpe:2.3:a:wordpress:wordpress:2.0:*:*:*:*:*:*:*
wordpresswordpress2.0.1cpe:2.3:a:wordpress:wordpress:2.0.1:*:*:*:*:*:*:*
wordpresswordpress2.0.2cpe:2.3:a:wordpress:wordpress:2.0.2:*:*:*:*:*:*:*
wordpresswordpress2.0.3cpe:2.3:a:wordpress:wordpress:2.0.3:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
wordpress	wordpress	2.0	cpe:2.3:a:wordpress:wordpress:2.0:::::::*
wordpress	wordpress	2.0.1	cpe:2.3:a:wordpress:wordpress:2.0.1:::::::*
wordpress	wordpress	2.0.2	cpe:2.3:a:wordpress:wordpress:2.0.2:::::::*
wordpress	wordpress	2.0.3	cpe:2.3:a:wordpress:wordpress:2.0.3:::::::*