Description

SQL injection vulnerability in wp-trackback.php in Wordpress 1.5 and earlier allows remote attackers to execute arbitrary SQL commands via the tb_id parameter.

Remediation

References

CVE-2005-1687

Related Vulnerabilities

WordPress Cross-Site Request Forgery (0.70 - 3.6.1)

WordPress Plugin twitterDash Cross-Site Request Forgery (2.1)

WordPress Plugin WP User Frontend-Registration, User Profile, Membership, Content Restriction, User Directory, and Frontend Post Submission Supply Chain Attack [Polyfill.io] (4.0.7)

WordPress Plugin RSS Aggregator by Feedzy-Feed to Post, Autoblogging, News & YouTube Video Feeds Aggregator Cross-Site Request Forgery (3.4.2)

WordPress Plugin WordPress Backup and Migrate-Backup Guard Multiple Unspecified Vulnerabilities (1.1.29)

Severity

High

Classification

CVE-2005-1687

Tags

Missing Update Known Vulnerabilities