CVE-2007-1897: SQL Injection
SQL injection vulnerability in xmlrpc (xmlrpc.php) in WordPress 2.1.2, and probably earlier, allows remote authenticated users to execute arbitrary SQL commands via a string parameter value in an XML RPC mt.setPostCategories method call, related to the postid variable.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2007-1897?
CVE-2007-1897 has a medium severity level due to its impact on SQL execution by authenticated users.
How do I fix CVE-2007-1897?
To fix CVE-2007-1897, update WordPress to version 2.1.3 or later to mitigate the SQL injection vulnerability.
Who is affected by CVE-2007-1897?
CVE-2007-1897 affects WordPress versions 2.1 and earlier, allowing vulnerabilities for remote authenticated users.
What type of vulnerability is CVE-2007-1897?
CVE-2007-1897 is a SQL injection vulnerability that can lead to arbitrary SQL command execution.
Which WordPress versions are vulnerable to CVE-2007-1897?
WordPress versions 2.1.1 to 2.1.2 are vulnerable to CVE-2007-1897.