CVE-2006-6017
WordPress before 2.0.5 does not properly store a profile containing a string representation of a serialized object, which allows remote authenticated users to cause a denial of …
Published: 2006-11-21 · CVSS: 6.5 · CVSS 3.1
WordPress before 2.0.5 does not properly store a profile containing a string representation of a serialized object, which allows remote authenticated users to cause a denial of service (application crash) via a string that represents a (1) malformed or (2) large serialized object, because the object triggers automatic unserialization for display.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7