Description

Cross-site scripting (XSS) vulnerability in wp-admin/templates.php in WordPress 2.0.5 allows remote attackers to inject arbitrary web script or HTML via the file parameter. NOTE: some sources have reported this as a vulnerability in the get_file_description function in wp-admin/admin-functions.php.

Remediation

References

CVE-2006-6808

Related Vulnerabilities

WordPress Plugin WP Accurate Form Data Multiple Vulnerabilities (1.2)

WordPress Plugin Multiple Page Generator-MPG Cross-Site Request Forgery (3.3.9)

WordPress Plugin Contact Form 7 Arbitrary File Upload (3.5.3)

WordPress Plugin MW WP Form Cross-Site Scripting (1.7.1)

Ruby on Rails Other Vulnerability (CVE-2013-0333)

Severity

Medium

Classification

CVE-2006-6808

Tags

Missing Update Known Vulnerabilities