Description

SQL injection vulnerability in template-functions-category.php in WordPress 1.5.1 allows remote attackers to execute arbitrary SQL commands via the $cat_ID variable, as demonstrated using the cat parameter to index.php.

Remediation

References

CVE-2005-1810

Related Vulnerabilities

PHP Other Vulnerability (CVE-2006-4481)

WordPress Plugin YITH WooCommerce Wishlist Unspecified Vulnerability (2.0.6)

WordPress Plugin BulletProof Security Multiple Vulnerabilities (.51)

WordPress Plugin Simple PDF Viewer Cross-Site Scripting (1.9)

MySQL CVE-2013-3793 Vulnerability (CVE-2013-3793)

Severity

High

Classification

CVE-2005-1810

Tags

Missing Update Known Vulnerabilities