CVE:CVE-2006-6016
CNNVD:CNNVD-200611-348
WordPress中的wp-admin/user-edit.php允许远程认证用户通过一个修改过的user_id参数来读取任意用户的元数据。
solution:Upgrade wordpress wordpress to a higher version than 2.0.4,and avoid the version (,2.0.4]