CVE-2008-2510

CVE-2008-2510 is a SQL injection vulnerability in the WordPress Upload File plugin, specifically in wp-uploadfile.php, where the f_id parameter enables remote attackers to execute arbitrary SQL commands. The issue is documented across multiple sources (NVD/NVD list and patch coverage) as affectin...

WordPress File Upload Plugin - SQL Injection

Because of this vulnerability in wp-uploadfile.php, the attackers can execute arbitrary SQL commands via the "fid" parameter. Solution Update the plugin...

WordPress Upload File插件wp-uploadfile.php SQL注入漏洞

BUGTRAQ ID: 29352 WordPress是一款免费的论坛Blog系统。 WordPress中所使用的Upload File插件中wp-uploadfile.php文件没有验证某些用户所提交的参数，远程攻击者可以向该插件提交恶意请求执行SQL注入攻击。 WordPress WordPress --------- 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本： http://wordpress.org/...