CVE-2007-0262

WordPress 2.0.6, and 2.1Alpha 3 (SVN:4662), does not properly verify that the m parameter value has the string data type, which allows remote attackers to…

published January 16, 2007

CVSS
—
EPSS
3%
Percentile
85.0
In the wild
Unconfirmed
What it is

WordPress 2.0.6, and 2.1Alpha 3 (SVN:4662), does not properly verify that the m parameter value has the string data type, which allows remote attackers to obtain sensitive information via an invalid m[] parameter, as demonstrated by obtaining the path, and obtaining certain SQL information such as the table prefix.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02581 · 85.0th percentile
Published
2007-01-16T23:00Z
EPSS history
Timeline
  • 16 JAN 23:00Z
    WordPress 2.0.6, and 2.1Alpha 3 (SVN:4662), does not properly verify that the m parameter value has the string data type, which allows remote attackers to…
    cvelistv5