Lucene search
CVE-2007-4894
🗓️ 14 Sep 2007 18:00:17Reported by Debian Security Bug TrackerType 
debiancve🔗 security-tracker.debian.org👁 12 Views
Multiple SQL injection vulnerabilities in Wordpress before 2.2.3 and Wordpress multi-user (MU) before 1.2.5a allow remote attackers to execute arbitrary SQL commands via the post_type parameter to the pingback.extensions.getPingbacks method in the XMLRPC interface, and other unspecified parameters related to "early database escaping" and missing validation of "query string like parameters.
Show more
| Reporter | Title | Published | Views | Family All 14 |
|---|---|---|---|---|
 | FreeBSD Ports: wordpress, de-wordpress, zh-wordpress | 4 Sep 200800:00 | – | openvas |
| FreeBSD Ports: wordpress, de-wordpress, zh-wordpress | 4 Sep 200800:00 | – | openvas |
| Fedora Update for wordpress FEDORA-2007-2143 | 27 Feb 200900:00 | – | openvas |
| Fedora Update for wordpress FEDORA-2007-2143 | 27 Feb 200900:00 | – | openvas |
 | FreeBSD : wordpress -- remote sql injection vulnerability (63347ee7-6841-11dc-82b6-02e0185f8d72) | 24 Sep 200700:00 | – | nessus |
| Fedora 7 : wordpress-2.2.3-0.fc7 (2007-2143) | 6 Nov 200700:00 | – | nessus |
 | WordPress <= 2.2.3 - Multiple SQL Injection | 14 Sep 200700:00 | – | patchstack |
 | CVE-2007-4894 | 14 Sep 200718:17 | – | cve |
 | CVE-2007-4894 | 14 Sep 200700:00 | – | ubuntucve |
 | CVE-2007-4894 | 14 Sep 200718:17 | – | nvd |
10
| OS | OS Version | Architecture | Package | Package Version | Filename |
|---|---|---|---|---|---|
| Debian | 12 | all | wordpress | 2.2.3-1 | wordpress_2.2.3-1_all.deb |
| Debian | 11 | all | wordpress | 2.2.3-1 | wordpress_2.2.3-1_all.deb |
| Debian | 999 | all | wordpress | 2.2.3-1 | wordpress_2.2.3-1_all.deb |
| Debian | 13 | all | wordpress | 2.2.3-1 | wordpress_2.2.3-1_all.deb |
Transform Your Security Services
Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.
Book a live demo14 Sep 2007 18:17Current
7.2High risk
Vulners AI Score7.2
CVSS27.5
EPSS0.03643