CVE-2005-2108

SQL injection vulnerability in XMLRPC server in WordPress 1.5.1.2 and earlier allows remote attackers to execute arbitrary SQL commands v… (CVE-2005-2108)

Description

SQL injection vulnerability in XMLRPC server in WordPress 1.5.1.2 and earlier allows remote attackers to execute arbitrary SQL commands via input that is not filtered in the HTTP_RAW_POST_DATA variable, which stores the data in an XML file.

Source: CVELISTV5 NVD

Metrics

Severity

none

57.04

—

no public PoC known

—

—

—

95.1 %

Critical — this CVE ranks in the top fifth of all CVEs scored today (rank ≥ 80%).

EPSS score

9.3 %

Moderate — model estimates 1-10% exploitation likelihood.

Published

2005-07-01 04:00 UTC

CWE

—

Affected products

Products and version ranges extracted from the vendor/CERT advisory. A range like „<4.14.6“ implies the update recommendation „upgrade to 4.14.6 or later“.

wordpress
wordpress

References & sources

IDCVE-2005-2108