Lucene search

K
patchstackN/APATCHSTACK:37964344E93112030AE804EA5EF1D64E
HistoryJun 01, 2005 - 12:00 a.m.

WordPress <=1.5.1 - SQL injection

2005-06-0100:00:00
N/A
patchstack.com
4

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

Because of this vulnerability, attackers can execute arbitrary SQL commands via the $cat_ID variable.

Solution

           Update the WordPress to the latest available version (at least 1.5.2).
CPENameOperatorVersion
wordpressle1.5.1

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

Related for PATCHSTACK:37964344E93112030AE804EA5EF1D64E