Lucene search
GoogleOSV:CVE-2017-16510HistoryNov 02, 2017 - 4:29 p.m.
CVE-2017-16510
2017-11-0216:29:00
Google
osv.dev
17
WordPress before 4.8.3 is affected by an issue where $wpdb->prepare() can create unexpected and unsafe queries leading to potential SQL injection (SQLi) in plugins and themes, as demonstrated by a “double prepare” approach, a different vulnerability than CVE-2017-14723.
References
www.securityfocus.com/bid/101638
blog.ircmaxell.com/2017/10/disclosure-wordpress-wpdb-sql-injection-technical.html
codex.wordpress.org/Version_4.8.3
github.com/WordPress/WordPress/commit/a2693fd8602e3263b5925b9d799ddd577202167d
lists.debian.org/debian-lts-announce/2017/11/msg00003.html
wordpress.org/news/2017/10/wordpress-4-8-3-security-release/
wpvulndb.com/vulnerabilities/8941
www.debian.org/security/2018/dsa-4090
Related
ubuntucve
ubuntucve
CVE-2017-16510
2017-11-02 00:00:00
CVE-2017-14723
2017-09-23 00:00:00
prion
prion
Sql injection
2017-11-02 16:29:00
Sql injection
2017-09-23 20:29:00
cvelist
cvelist
CVE-2017-16510
2017-11-02 16:00:00
CVE-2017-14723
2017-09-23 20:00:00
nvd
nvd
debian
debian
[SECURITY] [DLA 1160-1] wordpress security update
2017-11-04 20:06:14
[SECURITY] [DSA 4090-1] wordpress security update
2018-01-17 13:40:59
[SECURITY] [DSA 4090-1] wordpress security update
2018-01-17 13:40:59
debiancve
debiancve
CVE-2017-16510
2017-11-02 16:29:00
CVE-2017-14723
2017-09-23 20:29:00
nessus
nessus
Debian DLA-1160-1 : wordpress security update
2017-11-06 00:00:00
WordPress < 4.8.3 Multiple Vulnerabilities
2017-11-02 00:00:00
Debian DSA-4090-1 : wordpress - security update
2018-01-18 00:00:00
openvas
openvas
Debian: Security Advisory (DLA-1160-1)
2023-03-08 00:00:00
WordPress 'esc_sql' Function SQL Injection Vulnerability (Nov 2017) - Linux
2017-11-02 00:00:00
cve
cve
threatpost
threatpost
WordPress Delivers Second Patch For SQL Injection Bug
2017-11-01 14:35:18
attackerkb
attackerkb
CVE-2017-14723
2017-09-23 00:00:00
osv
osv
CVE-2017-14723
2017-09-23 20:29:00
wordpress - security update
2017-11-04 00:00:00
wordpress - security update
2018-01-17 00:00:00
veracode
veracode
SQL Injection
2017-10-03 06:39:40
SQL Injection
2017-11-03 01:23:13
wpvulndb
wpvulndb
WordPress 2.3.0-4.8.1 - $wpdb->prepare() potential SQL Injection
2017-09-19 00:00:00
WordPress <= 4.8.2 - $wpdb->prepare() Weakness
2017-10-31 00:00:00