Description

SQL injection vulnerability in XMLRPC server in WordPress 1.5.1.2 and earlier allows remote attackers to execute arbitrary SQL commands via input that is not filtered in the HTTP_RAW_POST_DATA variable, which stores the data in an XML file.

Remediation

References

CVE-2005-2108

Related Vulnerabilities

Python Integer Overflow or Wraparound Vulnerability (CVE-2017-1000158)

WordPress Plugin AliExpress Dropshipping with AliNext Lite Cross-Site Request Forgery (3.3.5)

WordPress Plugin Gallery Objects SQL Injection (0.4)

WordPress Plugin WP-Testimonials SQL Injection (3.4.1)

XOOPS Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2017-11174)

Severity

High

Classification

CVE-2005-2108

Tags

Missing Update Known Vulnerabilities