CVE-2007-6318

Published Dec 12, 2007

Last updated 6 years ago

Overview

Description: SQL injection vulnerability in wp-includes/query.php in WordPress 2.3.1 and earlier allows remote attackers to execute arbitrary SQL commands via the s parameter, when DB_CHARSET is set to (1) Big5, (2) GBK, or possibly other character set encodings that support a "\" in a multibyte character.
Source: cve@mitre.org
NVD status: Modified

Risk scores

CVSS 2.0

Type: Primary
Base score: 6.8
Impact score: 6.4
Exploitability score: 8.6
Vector string: AV:N/AC:M/Au:N/C:P/I:P/A:P

Weaknesses

nvd@nist.gov: CWE-89

Hype score: Not currently trending

Configurations

[
  {
    "nodes": [
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:a:wordpress:wordpress:2.0:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "BDCFE9AA-39E9-4366-AAB7-F7A891BC797E"
          },
          {
            "criteria": "cpe:2.3:a:wordpress:wordpress:2.0.1:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "BAF4671A-8449-438E-922B-94E5542137BC"
          },
          {
            "criteria": "cpe:2.3:a:wordpress:wordpress:2.0.2:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "92F05A1F-2227-4166-807B-1BDE2EA8F245"
          },
          {
            "criteria": "cpe:2.3:a:wordpress:wordpress:2.0.3:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "0CF73E23-7CD0-429C-986B-5F721F1696BC"
          },
          {
            "criteria": "cpe:2.3:a:wordpress:wordpress:2.0.4:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "EECE66B3-3696-4E98-AF63-DF2FB256A6FB"
          },
          {
            "criteria": "cpe:2.3:a:wordpress:wordpress:2.0.5:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "E75BB382-6B47-4C6A-BF94-80443BEB1A23"
          },
          {
            "criteria": "cpe:2.3:a:wordpress:wordpress:2.0.6:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "EFA75368-506F-4772-B0F2-8AAECDF288F2"
          },
          {
            "criteria": "cpe:2.3:a:wordpress:wordpress:2.0.7:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "FDDD9E5C-766F-4945-B87D-781E780AB03E"
          },
          {
            "criteria": "cpe:2.3:a:wordpress:wordpress:2.0.10:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "B2A0CAEE-5C14-44C6-85FB-6AFDAAA1C3F2"
          },
          {
            "criteria": "cpe:2.3:a:wordpress:wordpress:2.0.10_rc1:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "77D85664-E355-4A68-89EB-D5C9D0E6B916"
          },
          {
            "criteria": "cpe:2.3:a:wordpress:wordpress:2.0.10_rc2:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "91243043-F4A6-40EF-97FC-989ED366394C"
          },
          {
            "criteria": "cpe:2.3:a:wordpress:wordpress:2.1.1:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "7A7CBC45-320E-48CF-9A63-07DDE2FB61BE"
          },
          {
            "criteria": "cpe:2.3:a:wordpress:wordpress:2.1.2:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "266E32CD-66FB-4E19-8091-EC748B177D8A"
          },
          {
            "criteria": "cpe:2.3:a:wordpress:wordpress:2.1.3:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "D3DD9120-2224-4612-A6EE-539F47BD50E0"
          },
          {
            "criteria": "cpe:2.3:a:wordpress:wordpress:2.1.3_rc1:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "14B0A9E4-9D09-4127-AF8B-4DA6D488E67C"
          },
          {
            "criteria": "cpe:2.3:a:wordpress:wordpress:2.1.3_rc2:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "E8C667FD-BA00-43B3-8313-5A24A2DFF55A"
          },
          {
            "criteria": "cpe:2.3:a:wordpress:wordpress:2.2:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "5A9FBA02-8A6A-471F-92CD-D8E77B5061C2"
          },
          {
            "criteria": "cpe:2.3:a:wordpress:wordpress:2.2.1:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "1B5BC7E8-4C8A-4183-AB8C-1DAE12935387"
          },
          {
            "criteria": "cpe:2.3:a:wordpress:wordpress:2.2.2:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "A0F9137B-D13F-488B-8196-85E06FAB682E"
          },
          {
            "criteria": "cpe:2.3:a:wordpress:wordpress:2.2.3:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "82F257F4-CB62-4C6F-8866-AA253EC8C0C3"
          },
          {
            "criteria": "cpe:2.3:a:wordpress:wordpress:2.2_revision5002:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "8AC4F089-A606-4880-8C5D-24520B55CD14"
          },
          {
            "criteria": "cpe:2.3:a:wordpress:wordpress:2.2_revision5003:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "B4F6724F-AC94-4D6B-BEB7-EF4683FD1A07"
          },
          {
            "criteria": "cpe:2.3:a:wordpress:wordpress:2.3:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "79AB6F6F-2FE3-4FC3-9009-D40EA852711F"
          },
          {
            "criteria": "cpe:2.3:a:wordpress:wordpress:2.3.1:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "A82F4D88-779D-4D5D-96CD-2B31B61BA29E"
          }
        ],
        "operator": "OR"
      }
    ]
  }
]

Overview

Risk scores

CVSS 2.0

Weaknesses

Social media

Configurations

References