CVE-2007-2821
HIGH
7.5
CVSS 2.0
Description
SQL injection vulnerability in wp-admin/admin-ajax.php in WordPress before 2.2 allows remote attackers to execute arbitrary SQL commands via the cookie parameter.
Affected WordPress components
-
WordPress coreUp to and including 2.1.3
A confirmed match is backed by the plugin or theme slug. A possible match is based on the product name only and should be verified.
Affected products and versions
- n/a n/a — Versions not specified
- wordpress wordpress — Up to and including 2.1.3
References
- osvdb.org http://osvdb.org/36311
- secunia.com http://secunia.com/advisories/25345 Patch, Vendor Advisory
- secunia.com http://secunia.com/advisories/29014
- www.debian.org http://www.debian.org/security/2008/dsa-1502
- www.exploit-db.com http://www.exploit-db.com/exploits/3960
- www.securityfocus.com http://www.securityfocus.com/archive/1/469258/100/0/threaded
- www.securityfocus.com http://www.securityfocus.com/bid/24076 Exploit, Patch
- www.vupen.com http://www.vupen.com/english/advisories/2007/1889
- www.waraxe.us http://www.waraxe.us/advisory-50.html Vendor Advisory
- exchange.xforce.ibmcloud.com https://exchange.xforce.ibmcloud.com/vulnerabilities/34399
- nvd.nist.gov Official NVD record