CVE-2006-1012

SQL injection vulnerability in WordPress 1.5.2, and possibly other versions before 2.0, allows remote attackers to execute arbitrary SQL commands via the User-Agent field in an HTTP header for a comment...

CVE-2006-1012

CVE-2006-1012 describes a SQL injection in WordPress 1.5.2, and possibly earlier versions before 2.0, where an attacker can cause arbitrary SQL execution through the User-Agent header of a comment HTTP request. OpenVAS GLSA 200603-01 and related entries confirm WordPress as the affected software,...