Description

wp-admin/user-edit.php in WordPress before 2.0.5 allows remote authenticated users to read the metadata of an arbitrary user via a modified user_id parameter.

Remediation

References

CVE-2006-6016

Related Vulnerabilities

Moodle Resource Management Errors Vulnerability (CVE-2015-2268)

WordPress Plugin Export any WordPress data to XML/CSV Cross-Site Scripting (1.3.0)

WordPress Plugin Activity Log Multiple Cross-Site Scripting Vulnerabilities (2.4.0)

phpMyFAQ Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2017-15735)

WordPress Plugin Post SMTP-WP SMTP with Email Logs & Mobile App for Failure Alerts-Any SMTP Plus Gmail SMTP, Office 365, Brevo, Mailgun, Amazon SES, Postmark Cross-Site Scripting (2.1.3)

Severity

Medium

Tags

Missing Update Known Vulnerabilities CVE-2006-6016