VDB
CVE-2007-6318
CVE-2007-6318
PUBLISHED
CVSS 6.800000190734863 MEDIUM
SQL injection vulnerability in wp-includes/query.php in WordPress 2.3.1 and earlier allows remote attackers to execute arbitrary SQL commands via the s parameter, when DB_CHARSET is set to (1) Big5, (2) GBK, or possibly other character set encodings that support a "\" in a multibyte character.
EPSS 9.16% · 95.3th percentile
Risk Scores
CVSS 2.0
6.800000190734863
EPSS Score
9.16%
95.3th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| wordpress | wordpress | *, 2.0, 2.0.1 |
| n/a | n/a | n/a |
Timeline
- Dec 12, 2007 CVE Published
- Feb 4, 2022 EPSS Score
- May 21, 2022 EPSS Score
- Jul 13, 2022 EPSS Score
- Oct 27, 2022 EPSS Score
- Dec 19, 2022 EPSS Score
- Mar 7, 2023 EPSS Score
- Apr 4, 2023 EPSS Score
- Jul 19, 2023 EPSS Score
- Sep 9, 2023 EPSS Score
- Dec 24, 2023 EPSS Score
- Apr 8, 2024 EPSS Score
References
- http://www.abelcheung.org/advisory/20071210-wordpress-charset.txt url
- 20071210 WordPress Charset SQL injection vulnerability (re-resend) mailing-list
- 20071210 WordPress Charset SQL injection vulnerability (re-resend) mailing-list
- ADV-2007-4172 vdb
- 28310 third-party-advisory
- FEDORA-2008-0103 vendor-advisory
- wordpress-gbk-big5-sql-injection(38959) vdb
- FEDORA-2008-0126 vendor-advisory
- 1019071 vdb
- 28005 third-party-advisory
- 26795 vdb
- 3433 third-party-advisory
- https://nvd.nist.gov/vuln/detail/CVE-2007-6318 advisory