CVE-2007-6318

SQL injection vulnerability in wp-includes/query.php in WordPress 2.3.1 and earlier allows remote attackers to execute arbitrary SQL commands via the s…

published December 12, 2007

CVSS
—
EPSS
9%
Percentile
95.3
In the wild
Unconfirmed
What it is

SQL injection vulnerability in wp-includes/query.php in WordPress 2.3.1 and earlier allows remote attackers to execute arbitrary SQL commands via the s parameter, when DB_CHARSET is set to (1) Big5, (2) GBK, or possibly other character set encodings that support a "\" in a multibyte character.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.09156 · 95.3th percentile
Published
2007-12-12T00:00Z
EPSS history
Timeline
  • 12 DEC 00:00Z
    SQL injection vulnerability in wp-includes/query.php in WordPress 2.3.1 and earlier allows remote attackers to execute arbitrary SQL commands via the s…
    cvelistv5