CVE-2007-0262 — Wordpress vulnerability
5 documents5 sources
Severity
7.8HIGHNVD
EPSS
1.0%
top 23.40%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
Timeline
PublishedJan 16
Latest updateMay 1
Description
WordPress 2.0.6, and 2.1Alpha 3 (SVN:4662), does not properly verify that the m parameter value has the string data type, which allows remote attackers to obtain sensitive information via an invalid m[] parameter, as demonstrated by obtaining the path, and obtaining certain SQL information such as the table prefix.
CVSS vector
AV:N/AC:L/C:C/I:N/A:NExploitability: 10.0 | Impact: 6.9
Affected Packages3 packages
🔴Vulnerability Details
2📋Vendor Advisories
1Debian▶
CVE-2007-0262: wordpress - WordPress 2.0.6, and 2.1Alpha 3 (SVN:4662), does not properly verify that the m ...↗2007