UpHeron
All vulnerabilities

WordPress core

CVE-2006-3389

index.php in WordPress 2.0.3 allows remote attackers to obtain sensitive information, such as SQL table prefixes, via an invalid paged parameter, which displays the information in an SQL error message. NOTE: this issue has been disputed by a third party who states that the issue does not leak any target-specific information.

Severity
Medium 5.0
Published
6 Jul 2006
Last changed
16 Jun 2026
Added to UpHeron
17 Oct 2026
Sources
NVD

Affected software

SoftwareAffected versions
WordPressWordPress core · cpe:a:wordpress:wordpress
  • Version 2.0.3

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2006-3389
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2006-3389