CVE-2006-6016

wp-admin/user-edit.php in WordPress before 2.0.5 allows remote authenticated users to read the metadata of an arbitrary user via a modified user_id parameter.

Date published : 2006-11-21

http://bugs.gentoo.org/show_bug.cgi?id=153303

http://trac.wordpress.org/ticket/3142