Description

Cross-site scripting (XSS) vulnerability in wp-register.php in WordPress 2.0 allows remote attackers to inject arbitrary web script or HTML via the user_login parameter.

Remediation

References

CVE-2007-5106

Related Vulnerabilities

SeoPanel Cross-site Scripting (XSS) Vulnerability (CVE-2020-35930)

WordPress Plugin WP-AutoYoutube 'index.php' Script SQL Injection (0.1)

WordPress Plugin Sendit WP Newsletter 'submit.php' Blind SQL Injection (1.5.9)

phpMyFAQ Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2024-27300)

Oracle Database Server Resource Management Errors Vulnerability (CVE-2007-5506)

Severity

Medium

Classification

CVE-2007-5106 CWE-707

Tags

Missing Update Known Vulnerabilities