CVE-2007-0233

wp-trackback.php in WordPress 2.0.6 and earlier does not properly unset variables when the input data includes a numeric parameter with a value matching an alphanumeric parameter's hash value, which allows remote attackers to execute arbitrary SQL commands via the tbid parameter. NOTE: it could b...

CVE-2007-0233

Technical details for CVE-2007-0233 are not provided in the connected documents. The Initial document contains the vulnerability description, but no product/version/impact/fix details from connected sources. Monitor for updates from official advisories to obtain complete information.