CVE-2005-2108

SQL injection vulnerability in XMLRPC server in WordPress 1.5.1.2 and earlier allows remote attackers to execute arbitrary SQL commands via input that is not filtered in the HTTPRAWPOSTDATA variable, which stores the data in an XML file...

CVE-2005-2107

CVE-2005-2107 involves multiple XSS vulnerabilities in WordPress up to version 1.5.1.2, exploitable via the post.php parameters p and comment. The connected OpenVAS/OSV/NVD records confirm the affected product (WordPress) and the script injection vectors, describing remote execution of arbitrary ...