CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2007-4894

Multiple SQL injection vulnerabilities in Wordpress before 2.2.3 and Wordpress multi-user (MU) before 1.2.5a allow remote attackers to execute arbitrary SQL commands via the post_type parameter to the pingback.extensions.getPingbacks method in the XMLRPC interface, and other unspecified parameters related to "early database escaping" and missing validation of "query string like parameters."

Exploit prediction scoring system (EPSS) score

EPSS Score 0.036

EPSS Ranking 87.3%

CVSS Severity

CVSS v2 Score 7.5

References

Products affected by CVE-2007-4894

Wordpress » Wordpress » Version: 0.6.2

cpe:2.3:a:wordpress:wordpress:0.6.2
Wordpress » Wordpress » Version: 0.6.2.1

cpe:2.3:a:wordpress:wordpress:0.6.2.1
Wordpress » Wordpress » Version: 0.7

cpe:2.3:a:wordpress:wordpress:0.7
Wordpress » Wordpress » Version: 0.71

cpe:2.3:a:wordpress:wordpress:0.71
Wordpress » Wordpress » Version: 1.2

cpe:2.3:a:wordpress:wordpress:1.2
Wordpress » Wordpress » Version: 1.2.1

cpe:2.3:a:wordpress:wordpress:1.2.1
Wordpress » Wordpress » Version: 1.2.2

cpe:2.3:a:wordpress:wordpress:1.2.2
Wordpress » Wordpress » Version: 1.5

cpe:2.3:a:wordpress:wordpress:1.5
Wordpress » Wordpress » Version: 1.5.1

cpe:2.3:a:wordpress:wordpress:1.5.1
Wordpress » Wordpress » Version: 1.5.1.2

cpe:2.3:a:wordpress:wordpress:1.5.1.2
Wordpress » Wordpress » Version: 1.5.1.3

cpe:2.3:a:wordpress:wordpress:1.5.1.3
Wordpress » Wordpress » Version: 2.0

cpe:2.3:a:wordpress:wordpress:2.0
Wordpress » Wordpress » Version: 2.0.1

cpe:2.3:a:wordpress:wordpress:2.0.1
Wordpress » Wordpress » Version: 2.0.10_rc1

cpe:2.3:a:wordpress:wordpress:2.0.10_rc1
Wordpress » Wordpress » Version: 2.0.10_rc2

cpe:2.3:a:wordpress:wordpress:2.0.10_rc2
Wordpress » Wordpress » Version: 2.0.2

cpe:2.3:a:wordpress:wordpress:2.0.2
Wordpress » Wordpress » Version: 2.0.3

cpe:2.3:a:wordpress:wordpress:2.0.3
Wordpress » Wordpress » Version: 2.0.4

cpe:2.3:a:wordpress:wordpress:2.0.4
Wordpress » Wordpress » Version: 2.0.5

cpe:2.3:a:wordpress:wordpress:2.0.5
Wordpress » Wordpress » Version: 2.0.6

cpe:2.3:a:wordpress:wordpress:2.0.6
Wordpress » Wordpress » Version: 2.0.7

cpe:2.3:a:wordpress:wordpress:2.0.7
Wordpress » Wordpress » Version: 2.1.1

cpe:2.3:a:wordpress:wordpress:2.1.1
Wordpress » Wordpress » Version: 2.1.2

cpe:2.3:a:wordpress:wordpress:2.1.2
Wordpress » Wordpress » Version: 2.1.3

cpe:2.3:a:wordpress:wordpress:2.1.3
Wordpress » Wordpress » Version: 2.1.3_rc1

cpe:2.3:a:wordpress:wordpress:2.1.3_rc1
Wordpress » Wordpress » Version: 2.1.3_rc2

cpe:2.3:a:wordpress:wordpress:2.1.3_rc2
Wordpress » Wordpress » Version: 2.2

cpe:2.3:a:wordpress:wordpress:2.2
Wordpress » Wordpress » Version: 2.2.1

cpe:2.3:a:wordpress:wordpress:2.2.1
Wordpress » Wordpress » Version: 2.2.2

cpe:2.3:a:wordpress:wordpress:2.2.2
Wordpress » Wordpress » Version: 2.2_revision5002

cpe:2.3:a:wordpress:wordpress:2.2_revision5002
Wordpress » Wordpress » Version: 2.2_revision5003

cpe:2.3:a:wordpress:wordpress:2.2_revision5003

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2007-4894

Products

Pricing

Contact Us