{"id":"CVE-2006-3389","url":"https://www.cyber-defence.io/tools/cve/CVE-2006-3389","generatedAt":"2026-10-27T17:44:49.367Z","title":"index.php in WordPress 2.0.3 allows remote attackers to obtain sensitive information, such as SQL table prefixes, via an invalid paged parameter, which displays the information in an SQL error message.","description":"index.php in WordPress 2.0.3 allows remote attackers to obtain sensitive information, such as SQL table prefixes, via an invalid paged parameter, which displays the information in an SQL error message.  NOTE: this issue has been disputed by a third party who states that the issue does not leak any target-specific information.","published":"2006-07-06T20:05:00.000Z","lastModified":"2026-06-16T22:26:58.000Z","status":"Modified","sourceIdentifier":"cve@mitre.org","cvss":{"version":"2.0","score":5,"severity":"MEDIUM","vector":"AV:N/AC:L/Au:N/C:P/I:N/A:N"},"cwe":[],"affected":["wordpress/wordpress"],"epss":{"score":0.02945,"percentile":0.8705,"date":"2026-10-26","history":[]},"kev":{"listed":false},"exploits":{"count":0,"verified":false,"firstPublished":null,"source":"Exploit-DB (https://gitlab.com/exploit-database/exploitdb)","entries":[]},"verdict":{"level":"low","text":"Lower severity and a low EPSS score (2.94%). Track it; it rarely justifies an emergency change on its own."},"changes":[],"references":[{"url":"http://secunia.com/advisories/20928","tags":["Vendor Advisory"],"source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/21447","source":"cve@mitre.org"},{"url":"http://security.gentoo.org/glsa/glsa-200608-19.xml","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/1187","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/438942/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/439031/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/439062/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/440127/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/18779","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2006/2661","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/20928","tags":["Vendor Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/21447","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-200608-19.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securityreason.com/securityalert/1187","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/438942/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/439031/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/439062/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/440127/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/18779","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2006/2661","source":"af854a3a-2127-422b-91ae-364da2661108"}],"sources":{"nvd":"https://nvd.nist.gov/vuln/detail/CVE-2006-3389","epss":"https://www.first.org/epss/","kev":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog","exploitdb":"https://www.exploit-db.com/"},"licence":"CC BY 4.0 — link back to the CVE Explorer if you publish the results; upstream data remains subject to its own terms."}