CVE-2007-4894: SQL Injection

Published Sep 14, 2007

Updated

Multiple SQL injection vulnerabilities in Wordpress before 2.2.3 and Wordpress multi-user (MU) before 1.2.5a allow remote attackers to execute arbitrary SQL commands via the posttype parameter to the pingback.extensions.getPingbacks method in the XMLRPC interface, and other unspecified parameters related to "early database escaping" and missing validation of "query string like parameters."

Affected Software

31 affected components

WordPress=0.6.2

WordPress=0.6.2.1

WordPress=0.7

WordPress=0.71

WordPress=1.2

WordPress=1.2.1

WordPress=1.2.2

WordPress=1.5

WordPress=1.5.1

WordPress=1.5.1.2

WordPress=1.5.1.3

WordPress=2.0

WordPress=2.0.1

WordPress=2.0.2

WordPress=2.0.3

WordPress=2.0.4

WordPress=2.0.5

WordPress=2.0.6

WordPress=2.0.7

WordPress=2.0.10_rc1

WordPress=2.0.10_rc2

WordPress=2.1.1

WordPress=2.1.2

WordPress=2.1.3

WordPress=2.1.3_rc1

WordPress=2.1.3_rc2

WordPress=2.2

WordPress=2.2.1

WordPress=2.2.2

WordPress=2.2_revision5002

WordPress=2.2_revision5003

Remediation

Patch Available

http://wordpress.org/development/2007/09/wordpress-223/

Event History

Sep 14, 2007

CVE Published

06:17 PM

CVE Published

via MITRE·10:00 PM

Data Sourced

via MITRE·10:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2007-4894?

CVE-2007-4894 has a high severity level due to its potential for remote SQL injection attacks.

How do I fix CVE-2007-4894?

To fix CVE-2007-4894, upgrade to WordPress version 2.2.3 or later.

Which versions of WordPress are affected by CVE-2007-4894?

CVE-2007-4894 affects all WordPress versions prior to 2.2.3 and WordPress MU versions before 1.2.5a.

What types of attacks can CVE-2007-4894 facilitate?

CVE-2007-4894 can facilitate arbitrary SQL command execution by remote attackers.

Does CVE-2007-4894 affect any plugins or themes?

CVE-2007-4894 specifically targets the WordPress core software and not individual plugins or themes.