7 lines
No EOL
620 B
Text
7 lines
No EOL
620 B
Text
source: https://www.securityfocus.com/bid/8756/info
|
|
|
|
Wordpress has been reported prone to multiple SQL injection vulnerabilities. The issues have been reported to exist in the blog.header.php script. A lack of sufficient sanitization performed on 'cat' and 'order_by' URI parameters, may allow an attacker to inject malicious SQL code and thereby influence legitimate Wordpress SQL queries.
|
|
|
|
Ultimately an attacker may exploit this vulnerability to insert SQL code into Wordpress requests and have the SQL code executed by the underlying database server.
|
|
|
|
http://www.example.com/index.php?cat=100)%09or%090=0%09or%09(0=1 |