Description

WordPress before 2.0.6, when mbstring is enabled for PHP, decodes alternate character sets after escaping the SQL query, which allows remote attackers to bypass SQL injection protection schemes and execute arbitrary SQL commands via multibyte charsets, as demonstrated using UTF-7.

Remediation

References

CVE-2007-0107

Related Vulnerabilities

WordPress Plugin WP Gravity Forms Insightly Cross-Site Scripting (1.0.6)

WordPress Plugin Post Grid, Post Carousel, & List Category Posts-by Smart Post Show Cross-Site Request Forgery (2.3.4)

Plone CMS Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2016-4042)

Drupal Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-11023)

WordPress 'comment_post_ID' Parameter SQL Injection Vulnerability (3.0.4)

Severity

Medium

Classification

CVE-2007-0107

Tags

Missing Update Known Vulnerabilities