CVE-2007-0107: SQL Injection
First published: Tue Jan 09 2007(Updated: )
WordPress before 2.0.6, when mbstring is enabled for PHP, decodes alternate character sets after escaping the SQL query, which allows remote attackers to bypass SQL injection protection schemes and execute arbitrary SQL commands via multibyte charsets, as demonstrated using UTF-7.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| WordPress | <=2.0.5 | |
| <=2.0.5 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://www.hardened-php.net/advisory_022007.141.html
- http://wordpress.org/development/2007/01/wordpress-206/
- http://www.securityfocus.com/bid/21907
- http://secunia.com/advisories/23595
- http://www.openpkg.com/security/advisories/OpenPKG-SA-2007.005.html
- http://security.gentoo.org/glsa/glsa-200701-10.xml
- http://secunia.com/advisories/23741
- http://securityreason.com/securityalert/2112
- http://osvdb.org/31579
- http://www.vupen.com/english/advisories/2007/0061
- https://exchange.xforce.ibmcloud.com/vulnerabilities/31297
- http://www.securityfocus.com/archive/1/456049/100/0/threaded
Frequently Asked Questions
What is the severity of CVE-2007-0107?
CVE-2007-0107 has a medium severity rating due to its potential for allowing SQL injection attacks.
How do I fix CVE-2007-0107?
To fix CVE-2007-0107, upgrade WordPress to version 2.0.6 or later.
What are the affected versions for CVE-2007-0107?
CVE-2007-0107 affects WordPress versions prior to 2.0.6.
What type of attack does CVE-2007-0107 enable?
CVE-2007-0107 enables remote attackers to execute arbitrary SQL commands through multibyte charsets.
Which PHP feature is exploited in CVE-2007-0107?
CVE-2007-0107 exploits the mbstring feature of PHP when it is enabled.
- agent/references
- agent/type
- agent/author
- agent/severity
- agent/remedy
- agent/weakness
- agent/description
- collector/mitre-cve
- source/MITRE
- agent/first-publish-date
- collector/nvd-index
- agent/software-canonical-lookup-request
- collector/nvd-historical
- collector/nvd-api
- source/NVD
- agent/software-canonical-lookup
- agent/last-modified-date
- agent/source
- agent/softwarecombine
- agent/tags
- agent/event
- vendor/wordpress
- canonical/wordpress
- version/wordpress/2.0.5