← back
CVE-2006-2667

CVE-2006-2667

EPSS 14.3%
Direct static code injection vulnerability in WordPress 2.0.2 and earlier allows remote attackers to execute arbitrary commands by inserting a carriage return and PHP code when updating a profile, which is appended after a special comment sequence into files in (1) wp-content/cache/userlogins/ (2) wp-content/cache/users/ which are later included by cache.php, as demonstrated using the displayname argument.
Affected products
n/a · n/a
public PoCs found — 1
exploitdbwww.exploit-db.com/exploits/6unverified
⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →
References
http://retrogod.altervista.org/wordpress_202_xpl.htmlhttp://secunia.com/advisories/20271http://secunia.com/advisories/20608https://exchange.xforce.ibmcloud.com/vulnerabilities/26687http://www.gentoo.org/security/en/glsa/glsa-200606-08.xmlhttp://www.osvdb.org/25777http://www.securityfocus.com/archive/1/435039/100/0/threadedhttp://www.securityfocus.com/bid/18372http://www.vupen.com/english/advisories/2006/1992