Description

WordPress is prone to an SQL injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database implementation. WordPress versions 2.0.5 and prior are vulnerable.

Remediation

Update to WordPress version 2.0.6 or latest

References

http://www.securityfocus.com/bid/21907/exploit

http://www.exploit-db.com/exploits/3095/

http://www.hardened-php.net/advisory_022007.141.html

http://secunia.com/advisories/23595/

https://wordpress.org/news/2007/01/wordpress-206/

Related Vulnerabilities

WordPress Plugin Comment and Review Spam Control for WooCommerce Security Bypass (1.4.2)

Oracle JRE CVE-2013-2433 Vulnerability (CVE-2013-2433)

WordPress Plugin Woocommerce Category Banner Management Security Bypass (1.1.1)

WordPress Plugin YITH Desktop Notifications for WooCommerce Security Bypass (1.2.7)

phpMyAdmin Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2013-4995)

Severity

High

Classification

CVE-2007-0107 CWE-89 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:N CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N

Tags

Missing Update SQL Injection