CVE-2005-2108: SQL Injection
SQL injection vulnerability in XMLRPC server in WordPress 1.5.1.2 and earlier allows remote attackers to execute arbitrary SQL commands via input that is not filtered in the HTTPRAWPOSTDATA variable, which stores the data in an XML file.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2005-2108?
CVE-2005-2108 is classified as a critical vulnerability due to its potential for remote exploitation through SQL injection.
How can I fix CVE-2005-2108?
To fix CVE-2005-2108, update your WordPress installation to version 1.5.1.3 or later, which has mitigated this vulnerability.
Which versions of WordPress are affected by CVE-2005-2108?
WordPress versions 1.0 through 1.5.1.2 are affected by CVE-2005-2108 and are vulnerable to SQL injection.
What types of attacks can be executed through CVE-2005-2108?
CVE-2005-2108 allows attackers to execute arbitrary SQL commands, potentially leading to data manipulation or unauthorized access.
Is user input validation relevant in the context of CVE-2005-2108?
Yes, the vulnerability arises from a lack of input filtering in the HTTP_RAW_POST_DATA variable, highlighting the need for proper input validation.