CVE-2007-3140 - CVE Reference - Advisories

CVE Reference: CVE-2007-3140

NOTE: The text on this page is written by CVE MITRE and reflects neither the opinions of Secunia or the results of our research. All data on this page is written and maintained by CVE MITRE.

Original Page at CVE MITRE: CVE-2007-3140

Description: SQL injection vulnerability in xmlrpc.php in WordPress 2.2 allows remote authenticated users to execute arbitrary SQL commands via a parameter value in an XML RPC wp.suggestCategories methodCall, a different vector than CVE-2007-1897.

CVE Status: Candidate

References: XF http://xforce.iss.net/xforce/xfdb/34746 SAID Secunia Advisory: SA25552 OPENPKG http://www.openpkg.com/security/advisories/OpenPKG-SA-2007.021.html MILW0RM http://milw0rm.com/exploits/4039 BID 24344

Return to the previous page.

Secunia PSI
Scan | Patch | Track
Free Download

Secunia Poll

Most Popular Advisories

1.	CS-Cart "cs_cookies" SQL Injection Vulnerability

2.	Drupal Content Construction Kit Script Insertion Vulnerabilities

3.	HP OpenView Select Identity Connectors Information Disclosure

4.	rPath update for libtiff

5.	Gentoo update for mysql

6.	Gentoo update for realplayer

7.	Gentoo update for yelp

8.	Cisco ASA and PIX Security Appliances Multiple Vulnerabilities

9.	SUSE update for IBMJava5-JRE and java-1_5_0-ibm

10.	IBM AIX "swcons" Command Privilege Escalation Vulnerability