Security Advisory

CVE-2007-6318

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2007-12-12 00:00:00

Last updated 2024-08-07 16:02:36

Assigner mitre

CVSS score not scored

State PUBLISHED

Description

SQL injection vulnerability in wp-includes/query.php in WordPress 2.3.1 and earlier allows remote attackers to execute arbitrary SQL commands via the s parameter, when DB_CHARSET is set to (1) Big5, (2) GBK, or possibly other character set encodings that support a "\" in a multibyte character.

← Browse all CVEs View on cve.org ↗