CVE-2006-1012: SQL Injection
Published Mar 6, 2006
·Updated
SQL injection vulnerability in WordPress 1.5.2, and possibly other versions before 2.0, allows remote attackers to execute arbitrary SQL commands via the User-Agent field in an HTTP header for a comment.
Affected Software
1 affected component
WordPress=1.5.2
Remediation
Patch Available
Patch Available
Event History
Mar 6, 2006
CVE Published
09:02 PM
Mar 7, 2006
CVE Published
via MITRE·02:00 AM
Data Sourced
via MITRE·02:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2006-1012?
CVE-2006-1012 has a moderate severity rating due to its potential for remote SQL command execution.
2
How do I fix CVE-2006-1012?
To fix CVE-2006-1012, upgrade to WordPress version 2.0 or later.
3
Which versions of WordPress are affected by CVE-2006-1012?
CVE-2006-1012 affects WordPress versions 1.5.2 and possibly other versions before 2.0.
4
What type of vulnerability is CVE-2006-1012?
CVE-2006-1012 is an SQL injection vulnerability.
5
Can CVE-2006-1012 be exploited remotely?
Yes, CVE-2006-1012 can be exploited remotely through the User-Agent field in an HTTP header.