Description

SQL injection vulnerability in WordPress 1.5.2, and possibly other versions before 2.0, allows remote attackers to execute arbitrary SQL commands via the User-Agent field in an HTTP header for a comment.

Remediation

References

CVE-2006-1012

Related Vulnerabilities

Perl Integer Overflow or Wraparound Vulnerability (CVE-2020-10878)

WordPress Plugin WP REST API (WP API) Information Disclosure (1.2)

WeBid Server-Side Request Forgery (SSRF) Vulnerability (CVE-2022-41477)

Apache Tomcat Other Vulnerability (CVE-2011-2481)

MySQL CVE-2014-6489 Vulnerability (CVE-2014-6489)

Severity

High

Classification

CVE-2006-1012

Tags

Missing Update Known Vulnerabilities