CVE-2007-4894

Multiple SQL injection vulnerabilities in Wordpress before 2.2.3 and Wordpress multi-user (MU) before 1.2.5a allow remote attackers to execute arbitrary SQL…

published September 14, 2007

CVSS
—
EPSS
4%
Percentile
89.5
In the wild
Unconfirmed
What it is

Multiple SQL injection vulnerabilities in Wordpress before 2.2.3 and Wordpress multi-user (MU) before 1.2.5a allow remote attackers to execute arbitrary SQL commands via the post_type parameter to the pingback.extensions.getPingbacks method in the XMLRPC interface, and other unspecified parameters related to "early database escaping" and missing validation of "query string like parameters."

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.03637 · 89.5th percentile
Published
2007-09-14T18:00Z
EPSS history
Timeline
  • 14 SEP 18:00Z
    Multiple SQL injection vulnerabilities in Wordpress before 2.2.3 and Wordpress multi-user (MU) before 1.2.5a allow remote attackers to execute arbitrary SQL…
    cvelistv5