CVE-2008-0682: SQL Injection
Published Feb 12, 2008
·Updated
SQL injection vulnerability in wordspew-rss.php in the Wordspew plugin before 3.72 for Wordpress allows remote attackers to execute arbitrary SQL commands via the id parameter.
Affected Software
39 affected components
WordPress wordspew=3.34
WordPress wordspew=2.9
WordPress wordspew=2.85
WordPress wordspew=3.01
WordPress wordspew=2.93
WordPress wordspew=2.6
WordPress wordspew=2.5
WordPress wordspew=1.8
WordPress wordspew=3.33
WordPress wordspew=3.3
WordPress wordspew=2.2
WordPress wordspew=2.31
WordPress wordspew<=3.71
WordPress wordspew=3.7
WordPress wordspew=3.51
WordPress wordspew=1.6
WordPress wordspew=2.7
WordPress wordspew=3.15
WordPress wordspew=2.1
WordPress wordspew=2.32
WordPress wordspew=2.3
WordPress wordspew=2.91
WordPress wordspew=3.31
WordPress wordspew=2.94
WordPress wordspew=3.021
WordPress wordspew=3.6
WordPress wordspew=3.2
WordPress wordspew=2.8
WordPress wordspew=3.02
WordPress wordspew=2.92
WordPress wordspew=3.0
WordPress wordspew=2.0
WordPress wordspew=3.16
WordPress wordspew=3.32
WordPress wordspew=3.022
WordPress wordspew=2.95
WordPress wordspew=3.1
WordPress wordspew=1.7
WordPress wordspew=3.52
Event History
Feb 12, 2008
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2008-0682?
CVE-2008-0682 is considered a high severity vulnerability due to its potential for remote exploitation through SQL injection.
2
How do I fix CVE-2008-0682?
To fix CVE-2008-0682, upgrade the Wordspew plugin to version 3.72 or later for WordPress.
3
What versions of Wordspew are affected by CVE-2008-0682?
CVE-2008-0682 impacts Wordspew plugin versions prior to 3.72, including 1.0 through 3.71.
4
What kind of attack does CVE-2008-0682 allow?
CVE-2008-0682 allows attackers to execute arbitrary SQL commands via the 'id' parameter.
5
Is CVE-2008-0682 a common vulnerability?
CVE-2008-0682 is recognized as a common SQL injection vulnerability affecting WordPress plugins.