2 matches found
WordPress < 3.1.4 / 3.2-RC3 Multiple Blind SQL Injection Vulnerabilities
The remote web server hosts a version of WordPress prior to 3.1.4 / 3.2-RC3. It is reportedly affected by multiple SQL injection vulnerabilities due to a failure to adequately sanitize user-supplied input prior to using it in database queries. %NASLMINLEVEL 70300 C Tenable Network Security, Inc...
WordPress 3.1.3 injection vulnerability-vulnerability warning-the black bar safety net
First: getterms()过滤器 文件 中声 明 taxonomy.php not properly validate user input, allowing an attacker to construct arbitrary sql commands can be used to blind. The following URL can be used to perform SQL blind injection attack SQL injection sql-injection...