Cross-Site Scripting Vulnerabilities in Wordcircle by WordPress
CVE-2006-0204

Currently unrated

Key Information:

Vendor

WordPress
Status
Wordcircle
Vendor
CVE Published:
13 January 2006

What is CVE-2006-0204?

Multiple cross-site scripting vulnerabilities in Wordcircle 2.17 allow remote attackers to inject arbitrary web scripts or HTML through the 'Course name' field in index.php and potentially other unspecified fields. Exploiting this vulnerability enables malicious actors to compromise web application integrity and potentially launch further attacks against users.

References

http://www.vupen.com/english/advisories/2006/0185
vdb-entryx_refsource_VUPEN
https://exchange.xforce.ibmcloud.com/vulnerabilities/24106
vdb-entryx_refsource_XF
http://www.osvdb.org/22359
vdb-entryx_refsource_OSVDB

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.