CVE

Id
29675  
CVE No.
CVE-2007-6318  
Status
Candidate  
Description
SQL injection vulnerability in wp-includes/query.php in WordPress 2.3.1 and earlier allows remote attackers to execute arbitrary SQL commands via the s parameter, when DB_CHARSET is set to (1) Big5, (2) GBK, or possibly other character set encodings that support a "" in a multibyte character.  
Phase
Assigned (20071211)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
312846 29675 CVE-2007-6318 BUGTRAQ:20071210 WordPress Charset SQL injection vulnerability (re-resend)  View
312847 29675 CVE-2007-6318 URL:http://www.securityfocus.com/archive/1/archive/1/484828/100/0/threaded  View
312848 29675 CVE-2007-6318 FULLDISC:20071210 WordPress Charset SQL injection vulnerability (re-resend)  View
312849 29675 CVE-2007-6318 URL:http://lists.grok.org.uk/pipermail/full-disclosure/2007-December/058999.html  View
312850 29675 CVE-2007-6318 MISC:http://www.abelcheung.org/advisory/20071210-wordpress-charset.txt  View
312851 29675 CVE-2007-6318 FEDORA:FEDORA-2008-0103  View
312852 29675 CVE-2007-6318 URL:https://www.redhat.com/archives/fedora-package-announce/2008-January/msg00079.html  View
312853 29675 CVE-2007-6318 FEDORA:FEDORA-2008-0126  View
312854 29675 CVE-2007-6318 URL:https://www.redhat.com/archives/fedora-package-announce/2008-January/msg00098.html  View
312855 29675 CVE-2007-6318 BID:26795  View
312856 29675 CVE-2007-6318 URL:http://www.securityfocus.com/bid/26795  View
312857 29675 CVE-2007-6318 VUPEN:ADV-2007-4172  View
312858 29675 CVE-2007-6318 URL:http://www.vupen.com/english/advisories/2007/4172  View
312859 29675 CVE-2007-6318 SECTRACK:1019071  View
312860 29675 CVE-2007-6318 URL:http://www.securitytracker.com/id?1019071  View
312861 29675 CVE-2007-6318 SECUNIA:28005  View
312862 29675 CVE-2007-6318 URL:http://secunia.com/advisories/28005  View
312863 29675 CVE-2007-6318 SECUNIA:28310  View
312864 29675 CVE-2007-6318 URL:http://secunia.com/advisories/28310  View
312865 29675 CVE-2007-6318 SREASON:3433  View
312866 29675 CVE-2007-6318 URL:http://securityreason.com/securityalert/3433  View
312867 29675 CVE-2007-6318 XF:wordpress-gbk-big5-sql-injection(38959)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
54278 JVNDB-2007-002970 Drupal の Feature モジュールにおけるクロスサイトリクエストフォージェリ攻撃を誘発する脆弱性 Drupal の Feature モジュールは、Drupal の Forms API サブミッションモデルに準拠しないため、クロスサイトリクエストフォージェリ攻撃を誘発する脆弱性が存在します。 CVE-2007-6320 29675 4.3 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-002970.html  View