Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2006-6017

Опубликовано: 21 нояб. 2006
Источник: nvd
CVSS3: 6.5
CVSS2: 4
EPSS Низкий

Описание

WordPress before 2.0.5 does not properly store a profile containing a string representation of a serialized object, which allows remote authenticated users to cause a denial of service (application crash) via a string that represents a (1) malformed or (2) large serialized object, because the object triggers automatic unserialization for display.

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*
Версия до 2.0.5 (включая)

EPSS

Процентиль: 84%
0.02285
Низкий

6.5 Medium

CVSS3

4 Medium

CVSS2

Дефекты

NVD-CWE-Other
CWE-400

Связанные уязвимости

CVSS3: 6.5
ubuntu
больше 18 лет назад

WordPress before 2.0.5 does not properly store a profile containing a string representation of a serialized object, which allows remote authenticated users to cause a denial of service (application crash) via a string that represents a (1) malformed or (2) large serialized object, because the object triggers automatic unserialization for display.

CVSS3: 6.5
debian
больше 18 лет назад

WordPress before 2.0.5 does not properly store a profile containing a ...

CVSS3: 6.5
github
больше 3 лет назад

WordPress before 2.0.5 does not properly store a profile containing a string representation of a serialized object, which allows remote authenticated users to cause a denial of service (application crash) via a string that represents a (1) malformed or (2) large serialized object, because the object triggers automatic unserialization for display.

EPSS

Процентиль: 84%
0.02285
Низкий

6.5 Medium

CVSS3

4 Medium

CVSS2

Дефекты

NVD-CWE-Other
CWE-400