SQL injection vulnerability in the do_trackbacks function in wp-includes/comment.php in WordPress before 3.0.2 allows remote authenticated users to execute arbitrary SQL commands via the Send Trackbacks field.

http://www.cvedetails.com/cve/CVE-2010-4257/

http://core.trac.wordpress.org/changeset/16625
http://core.trac.wordpress.org/changeset/16638

This vulnerability affects the following application versions:

  • WordPress 3.0
  • WordPress 3.0.1

Skriv et svar

Din e-mailadresse vil ikke blive publiceret. Krævede felter er markeret med *