vendor:
WordPress
by:
M4g
5,8
CVSS
MEDIUM
SQL Injection
89
CWE
Product Name: WordPress
Affected Version From: N/A
Affected Version To: N/A
Patch Exists: YES
Related CWE: N/A
CPE: N/A
Metasploit:
N/A
Other Scripts:
N/A
Tags: N/A
CVSS Metrics: N/A
Nuclei References:
N/A
Nuclei Metadata: N/A
Platforms Tested: N/A
2010
SQL Injection Vulnerability in do_trackbacks() Function of WordPress
The do_trackbacks() function in wp-includes/comment.php does not properly escape the input that comes from the user, allowing a remote user with publish_posts and edit_published_posts capabilities to execute an arbitrary SELECT SQL query, which can lead to disclosure of any information stored in the WordPress database. The $tb_ping variable is pased directly to the trackback() function without any sanitization.
Mitigation:
Sanitize user input before passing it to the trackback() function.
