Unknown
CVE-2007-6318
CVE ID
AttackerKB requires a CVE ID in order to pull vulnerability data and references from the CVE list and the National Vulnerability Database. If available, please supply below:
Add References:
Unknown
(0 users assessed)
Unknown
(0 users assessed)Unknown
Unknown
Unknown
MITRE ATT&CK
Collection
Command and Control
Credential Access
Defense Evasion
Discovery
Execution
Exfiltration
Impact
Initial Access
Lateral Movement
Persistence
Privilege Escalation
Topic Tags
Description
SQL injection vulnerability in wp-includes/query.php in WordPress 2.3.1 and earlier allows remote attackers to execute arbitrary SQL commands via the s parameter, when DB_CHARSET is set to (1) Big5, (2) GBK, or possibly other character set encodings that support a “\” in a multibyte character.
Add Assessment
No one has assessed this topic. Be the first to add your voice to the community.
CVSS V3 Severity and Metrics
General Information
Vendors
Products
- wordpress 2.0,
- wordpress 2.0.1,
- wordpress 2.0.10,
- wordpress 2.0.10 rc1,
- wordpress 2.0.10 rc2,
- wordpress 2.0.2,
- wordpress 2.0.3,
- wordpress 2.0.4,
- wordpress 2.0.5,
- wordpress 2.0.6,
- wordpress 2.0.7,
- wordpress 2.1.1,
- wordpress 2.1.2,
- wordpress 2.1.3,
- wordpress 2.1.3 rc1,
- wordpress 2.1.3 rc2,
- wordpress 2.2,
- wordpress 2.2 revision5002,
- wordpress 2.2 revision5003,
- wordpress 2.2.1,
- wordpress 2.2.2,
- wordpress 2.2.3,
- wordpress 2.3,
- wordpress 2.3.1
References
Advisory
Additional Info
Technical Analysis
Report as Emergent Threat Response
Report as Zero-day Exploit
Report as Exploited in the Wild
CVE ID
AttackerKB requires a CVE ID in order to pull vulnerability data and references from the CVE list and the National Vulnerability Database. If available, please supply below:
