Lucene search
RgodPATCHSTACK:D5580F11C7675449C8132A390CB61B8DHistoryJan 12, 2007 - 12:00 a.m.
WordPress <= 2.0.6 - SQL Injection vulnerability
2007-01-1200:00:00
rgod
patchstack.com
8
7.5 High
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
The attackers can execute arbitrary SQL commands via the “tb_id” parameter.
Solution
Update the WordPress to the latest available version (at least 2.0.7).
Related
nessus
nessus
WordPress Trackback 'wp-trackback.php' 'tb_id' Parameter SQL Injection
2007-01-12 00:00:00
ubuntucve
ubuntucve
CVE-2007-0233
2007-01-13 00:00:00
cve
cve
CVE-2007-0233
2007-01-13 02:28:00
prion
prion
Sql injection
2007-01-13 02:28:00
debiancve
debiancve
CVE-2007-0233
2007-01-13 02:28:00
securityvulns
securityvulns
7.5 High
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
Related for PATCHSTACK:D5580F11C7675449C8132A390CB61B8D