Lucene search

K
patchstackSidPATCHSTACK:C08FC98813A217AE0C65474A536708A0
HistoryApr 09, 2007 - 12:00 a.m.

WordPress <= 2.1.2 - SQL Injection vulnerability

2007-04-0900:00:00
Sid
patchstack.com
3

6.5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:P/I:P/A:P

Because of this vulnerability in xmlrpc, the authenticated users can execute arbitrary SQL commands.

Solution

           Update the WordPress to the latest available version (at least 2.1.3).
CPENameOperatorVersion
wordpressle2.1.2

6.5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:P/I:P/A:P

Related for PATCHSTACK:C08FC98813A217AE0C65474A536708A0