Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nvd[email protected]NVD:CVE-2007-6318
HistoryDec 12, 2007 - 12:46 a.m.

CVE-2007-6318

2007-12-1200:46:00
CWE-89
[email protected]
web.nvd.nist.gov
4

CVSS2

6.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

EPSS

0.009

Percentile

83.4%

JSON

SQL injection vulnerability in wp-includes/query.php in WordPress 2.3.1 and earlier allows remote attackers to execute arbitrary SQL commands via the s parameter, when DB_CHARSET is set to (1) Big5, (2) GBK, or possibly other character set encodings that support a "" in a multibyte character.

Affected configurations

Nvd
Node
wordpresswordpressMatch2.0
OR
wordpresswordpressMatch2.0.1
OR
wordpresswordpressMatch2.0.2
OR
wordpresswordpressMatch2.0.3
OR
wordpresswordpressMatch2.0.4
OR
wordpresswordpressMatch2.0.5
OR
wordpresswordpressMatch2.0.6
OR
wordpresswordpressMatch2.0.7
OR
wordpresswordpressMatch2.0.10
OR
wordpresswordpressMatch2.0.10_rc1
OR
wordpresswordpressMatch2.0.10_rc2
OR
wordpresswordpressMatch2.1.1
OR
wordpresswordpressMatch2.1.2
OR
wordpresswordpressMatch2.1.3
OR
wordpresswordpressMatch2.1.3_rc1
OR
wordpresswordpressMatch2.1.3_rc2
OR
wordpresswordpressMatch2.2
OR
wordpresswordpressMatch2.2.1
OR
wordpresswordpressMatch2.2.2
OR
wordpresswordpressMatch2.2.3
OR
wordpresswordpressMatch2.2_revision5002
OR
wordpresswordpressMatch2.2_revision5003
OR
wordpresswordpressMatch2.3
OR
wordpresswordpressMatch2.3.1
VendorProductVersionCPE
wordpresswordpress2.0cpe:2.3:a:wordpress:wordpress:2.0:*:*:*:*:*:*:*
wordpresswordpress2.0.1cpe:2.3:a:wordpress:wordpress:2.0.1:*:*:*:*:*:*:*
wordpresswordpress2.0.2cpe:2.3:a:wordpress:wordpress:2.0.2:*:*:*:*:*:*:*
wordpresswordpress2.0.3cpe:2.3:a:wordpress:wordpress:2.0.3:*:*:*:*:*:*:*
wordpresswordpress2.0.4cpe:2.3:a:wordpress:wordpress:2.0.4:*:*:*:*:*:*:*
wordpresswordpress2.0.5cpe:2.3:a:wordpress:wordpress:2.0.5:*:*:*:*:*:*:*
wordpresswordpress2.0.6cpe:2.3:a:wordpress:wordpress:2.0.6:*:*:*:*:*:*:*
wordpresswordpress2.0.7cpe:2.3:a:wordpress:wordpress:2.0.7:*:*:*:*:*:*:*
wordpresswordpress2.0.10cpe:2.3:a:wordpress:wordpress:2.0.10:*:*:*:*:*:*:*
wordpresswordpress2.0.10_rc1cpe:2.3:a:wordpress:wordpress:2.0.10_rc1:*:*:*:*:*:*:*
Rows per page:
1-10 of 241

Related

prion 1
patchstack 1
exploitdb 1
seebug 1
ubuntucve 1
debiancve 1
cvelist 1
cve 1
fedora 2
nessus 2
openvas 4
prion
prion
Sql injection
2007-12-12 00:46:00
patchstack
patchstack
WordPress <= 2.3.1 - SQL Injection
2007-12-11 00:00:00
exploitdb
exploitdb
WordPress Core 2.3.1 - Charset SQL Injection
2007-12-11 00:00:00
seebug
seebug
WordPress wp-db.php Character Set SQL Injection Vulnerability
2008-01-06 00:00:00
ubuntucve
ubuntucve
CVE-2007-6318
2007-12-12 00:00:00
debiancve
debiancve
CVE-2007-6318
2007-12-12 00:46:00
cvelist
cvelist
CVE-2007-6318
2007-12-12 00:00:00
cve
cve
CVE-2007-6318
2007-12-12 00:46:00
fedora
fedora
[SECURITY] Fedora 7 Update: wordpress-2.3.2-1.fc7
2008-01-03 01:41:39
[SECURITY] Fedora 8 Update: wordpress-2.3.2-1.fc8
2008-01-03 01:39:27
nessus
nessus
Fedora 8 : wordpress-2.3.2-1.fc8 (2008-0103)
2008-01-04 00:00:00
Fedora 7 : wordpress-2.3.2-1.fc7 (2008-0126)
2008-01-04 00:00:00
openvas
openvas
Fedora Update for wordpress FEDORA-2008-0103
2009-02-17 00:00:00
Fedora Update for wordpress FEDORA-2008-0103
2009-02-17 00:00:00
Fedora Update for wordpress FEDORA-2008-0126
2009-02-17 00:00:00

CVSS2

6.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

EPSS

0.009

Percentile

83.4%

JSON
Related for NVD:CVE-2007-6318
prion1patchstack1exploitdb1seebug1ubuntucve1debiancve1cvelist1cve1fedora2nessus2openvas4