CVE-2006-2667

Direct static code injection vulnerability in WordPress 2.0.2 and earlier allows remote attackers to execute arbitrary commands by inserting a carriage return and PHP code when updating a profile, which is appended after a special comment sequence into files in (1) wp-content/cache/userlogins/ (2) wp-content/cache/users/ which are later included by cache.php, as demonstrated using the displayname argument.

CVSS v2.0

7.5 HIGHAV:N/AC:L/Au:N/C:P/I:P/A:P

EPSS

14.53% chance of exploitation in the next 30 days, 96th percentile

Nuclei

high

Published

2006-05-30

Updated

2024-08-07

Nuclei templates (1)

• topscoder/nuclei-wordfence-cve/blob/main/nuclei-templates/2006/CVE-2006-2667-wordpress-cc…

ExploitDB entries (1)

• https://www.exploit-db.com/exploits/6

References

• CVE Record
• NVD entry

Related

• CVE-2006-2666
• CVE-2006-2668
• CVE-2006-2665
• CVE-2006-2675
• CVE-2006-2661
• CVE-2006-2680