Detections
Analytics

WordPress < 2.0.6 HTML Parameter Injection

medium Nessus Network Monitor Plugin ID 3873

Synopsis

The remote server is hosting an outdated installation of WordPress that is vulnerable to HTML Parameter Injection.

Description

The remote host is running WordPress, a web blog manager written in PHP. The remote version of this software is reported to be vulnerable to a flaw where a remote attacker can inject malicious script code into the 'file' parameter of the 'template.php' script. Successful exploitation would result in script code being executed in the browsers of other WordPress clients. In addition, the application is reported to be vulnerable to a SQL injection attack. An attacker exploiting this attack vector would only need to send malformed requests to the WordPress application. Successful exploitation would result in the attacker executing arbitrary SQL statements on the database server utilized by WordPress.

Solution

Upgrade to WordPress 2.0.6, or later.

See Also

http://wordpress.org

Plugin Details

Severity: Medium

ID: 3873

Family: CGI

Published: 12/28/2006

Updated: 3/6/2019

Risk Information

VPR

Risk Factor: Medium

Score: 6.6

CVSS v2

Risk Factor: Medium

Base Score: 5.8

Temporal Score: 4.8

Vector: CVSS2#AV:A/AC:L/Au:N/C:P/I:P/A:P

CVSS v3

Risk Factor: Medium

Base Score: 6.3

Temporal Score: 5.9

Vector: CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

Temporal Vector: CVSS:3.0/E:F/RL:O/RC:C

Vulnerability Information

CPE: cpe:/a:wordpress:wordpress

Reference Information

CVE: CVE-2006-6808, CVE-2007-0107

BID: 21896, 21907, 21782