cve/cves/2006/CVE-2006-6808.md at main

admin/cve

0 Fork 0

mirror of https://github.com/0xMarcio/cve.git synced 2026-10-27 16:51:03 +00:00

Files

T

0xMarcio 82ab6a1c19 Fix PoC discovery, freshness and source validation

2026-10-06 23:23:48 +02:00

796 B

Raw Permalink Blame History

CVE-2006-6808

Description

Cross-site scripting (XSS) vulnerability in wp-admin/templates.php in WordPress 2.0.5 allows remote attackers to inject arbitrary web script or HTML via the file parameter. NOTE: some sources have reported this as a vulnerability in the get_file_description function in wp-admin/admin-functions.php.

POC

Reference

No PoCs from references.

Github

No PoCs found on GitHub currently.

ExploitDB

https://www.exploit-db.com/exploits/29356

796 B Raw Permalink Blame History