Lucene search

K
cve[email protected]CVE-2007-3140
HistoryJun 08, 2007 - 4:30 p.m.

CVE-2007-3140

2007-06-0816:30:00
NVD-CWE-Other
web.nvd.nist.gov
21
cve-2007-3140
sql injection
wordpress 2.2
xmlrpc.php
nvd

7.6 High

AI Score

Confidence

Low

6.5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:P/I:P/A:P

0.107 Low

EPSS

Percentile

95.0%

SQL injection vulnerability in xmlrpc.php in WordPress 2.2 allows remote authenticated users to execute arbitrary SQL commands via a parameter value in an XML RPC wp.suggestCategories methodCall, a different vector than CVE-2007-1897.

CPENameOperatorVersion
wordpress:wordpresswordpresseq2.2

7.6 High

AI Score

Confidence

Low

6.5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:P/I:P/A:P

0.107 Low

EPSS

Percentile

95.0%