CVE-2006-1796
published 2006-04-17CVE-2006-1796: Cross-site scripting (XSS) vulnerability in the paging links functionality in template-functions-links.php in Wordpress 1.5.2, and possibly other versions…
PriorityP418medium6.8CVSS 2.0
AVNACMAuNCPIPAP
EPSS
1.94%
77.9th percentile
Cross-site scripting (XSS) vulnerability in the paging links functionality in template-functions-links.php in Wordpress 1.5.2, and possibly other versions before 2.0.1, allows remote attackers to inject arbitrary web script or HTML to Internet Explorer users via the request URI ($_SERVER['REQUEST_URI']).
Affected
22 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | wordpress | < wordpress 2.0.1 (bookworm) | wordpress 2.0.1 (bookworm) |
| wordpress | wordpress | <= 2.0 | — |
| wordpress | wordpress | — | — |
| wordpress | wordpress | — | — |
| wordpress | wordpress | — | — |
| wordpress | wordpress | — | — |
| wordpress | wordpress | — | — |
| wordpress | wordpress | — | — |
| wordpress | wordpress | — | — |
| wordpress | wordpress | — | — |
| wordpress | wordpress | — | — |
| wordpress | wordpress | — | — |
| wordpress | wordpress | — | — |
| wordpress | wordpress | — | — |
| wordpress | wordpress | — | — |
| wordpress | wordpress | — | — |
| wordpress | wordpress | — | — |
| wordpress | wordpress | — | — |
| wordpress | wordpress | >= 0 < 2.0.1 | 2.0.1 |
| wordpress | wordpress | >= 0 < 2.0.1 | 2.0.1 |
| wordpress | wordpress | >= 0 < 2.0.1 | 2.0.1 |
| wordpress | wordpress | >= 0 < 2.0.1 | 2.0.1 |
CVSS provenance
nvdv2.06.8MEDIUMAV:N/AC:M/Au:N/C:P/I:P/A:P
osv6.8MEDIUM
vendor_debian6.8MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Debian
CVE-2006-1796: wordpress - Cross-site scripting (XSS) vulnerability in the paging links functionality in te...
vendor_debian·2006·CVSS 6.8
CVE-2006-1796 [MEDIUM] CVE-2006-1796: wordpress - Cross-site scripting (XSS) vulnerability in the paging links functionality in te...
Cross-site scripting (XSS) vulnerability in the paging links functionality in template-functions-links.php in Wordpress 1.5.2, and possibly other versions before 2.0.1, allows remote attackers to inject arbitrary web script or HTML to Internet Explorer users via the request URI ($_SERVER['REQUEST_URI']).
Scope: local
bookworm: resolved (fixed in 2.0.1)
bullseye: resolved (fixed in 2.0.1)
forky: resolved (fixed in 2.0.1)
sid: resolved (fixed in 2.0.1)
trixie: resolved (fixed in 2.0.1)
GHSA
GHSA-35pf-fj9v-j4j3: Cross-site scripting (XSS) vulnerability in the paging links functionality in template-functions-links
ghsa_unreviewed·2022-05-01
CVE-2006-1796 [MEDIUM] GHSA-35pf-fj9v-j4j3: Cross-site scripting (XSS) vulnerability in the paging links functionality in template-functions-links
Cross-site scripting (XSS) vulnerability in the paging links functionality in template-functions-links.php in Wordpress 1.5.2, and possibly other versions before 2.0.1, allows remote attackers to inject arbitrary web script or HTML to Internet Explorer users via the request URI ($_SERVER['REQUEST_URI']).
OSV
CVE-2006-1796: Cross-site scripting (XSS) vulnerability in the paging links functionality in template-functions-links
osv·2006-04-17·CVSS 6.8
CVE-2006-1796 [MEDIUM] CVE-2006-1796: Cross-site scripting (XSS) vulnerability in the paging links functionality in template-functions-links
Cross-site scripting (XSS) vulnerability in the paging links functionality in template-functions-links.php in Wordpress 1.5.2, and possibly other versions before 2.0.1, allows remote attackers to inject arbitrary web script or HTML to Internet Explorer users via the request URI ($_SERVER['REQUEST_URI']).
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2006-04-17
Published