Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2008-0682

Опубликовано: 12 фев. 2008
Источник: nvd
CVSS2: 7.5
EPSS Низкий

Описание

SQL injection vulnerability in wordspew-rss.php in the Wordspew plugin before 3.72 for Wordpress allows remote attackers to execute arbitrary SQL commands via the id parameter.

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:wordpress:wordspew:*:*:*:*:*:*:*:*
Версия до 3.71 (включая)
cpe:2.3:a:wordpress:wordspew:1.6:*:*:*:*:*:*:*
cpe:2.3:a:wordpress:wordspew:1.7:*:*:*:*:*:*:*
cpe:2.3:a:wordpress:wordspew:1.8:*:*:*:*:*:*:*
cpe:2.3:a:wordpress:wordspew:2.0:*:*:*:*:*:*:*
cpe:2.3:a:wordpress:wordspew:2.1:*:*:*:*:*:*:*
cpe:2.3:a:wordpress:wordspew:2.2:*:*:*:*:*:*:*
cpe:2.3:a:wordpress:wordspew:2.3:*:*:*:*:*:*:*
cpe:2.3:a:wordpress:wordspew:2.5:*:*:*:*:*:*:*
cpe:2.3:a:wordpress:wordspew:2.6:*:*:*:*:*:*:*
cpe:2.3:a:wordpress:wordspew:2.7:*:*:*:*:*:*:*
cpe:2.3:a:wordpress:wordspew:2.8:*:*:*:*:*:*:*
cpe:2.3:a:wordpress:wordspew:2.9:*:*:*:*:*:*:*
cpe:2.3:a:wordpress:wordspew:2.31:*:*:*:*:*:*:*
cpe:2.3:a:wordpress:wordspew:2.32:*:*:*:*:*:*:*
cpe:2.3:a:wordpress:wordspew:2.85:*:*:*:*:*:*:*
cpe:2.3:a:wordpress:wordspew:2.91:*:*:*:*:*:*:*
cpe:2.3:a:wordpress:wordspew:2.92:*:*:*:*:*:*:*
cpe:2.3:a:wordpress:wordspew:2.93:*:*:*:*:*:*:*
cpe:2.3:a:wordpress:wordspew:2.94:*:*:*:*:*:*:*
cpe:2.3:a:wordpress:wordspew:2.95:*:*:*:*:*:*:*
cpe:2.3:a:wordpress:wordspew:3.0:*:*:*:*:*:*:*
cpe:2.3:a:wordpress:wordspew:3.01:*:*:*:*:*:*:*
cpe:2.3:a:wordpress:wordspew:3.1:*:*:*:*:*:*:*
cpe:2.3:a:wordpress:wordspew:3.2:*:*:*:*:*:*:*
cpe:2.3:a:wordpress:wordspew:3.02:*:*:*:*:*:*:*
cpe:2.3:a:wordpress:wordspew:3.3:*:*:*:*:*:*:*
cpe:2.3:a:wordpress:wordspew:3.6:*:*:*:*:*:*:*
cpe:2.3:a:wordpress:wordspew:3.7:*:*:*:*:*:*:*
cpe:2.3:a:wordpress:wordspew:3.15:*:*:*:*:*:*:*
cpe:2.3:a:wordpress:wordspew:3.16:*:*:*:*:*:*:*
cpe:2.3:a:wordpress:wordspew:3.021:*:*:*:*:*:*:*
cpe:2.3:a:wordpress:wordspew:3.022:*:*:*:*:*:*:*
cpe:2.3:a:wordpress:wordspew:3.31:*:*:*:*:*:*:*
cpe:2.3:a:wordpress:wordspew:3.32:*:*:*:*:*:*:*
cpe:2.3:a:wordpress:wordspew:3.33:*:*:*:*:*:*:*
cpe:2.3:a:wordpress:wordspew:3.34:*:*:*:*:*:*:*
cpe:2.3:a:wordpress:wordspew:3.51:*:*:*:*:*:*:*
cpe:2.3:a:wordpress:wordspew:3.52:*:*:*:*:*:*:*

EPSS

Процентиль: 71%
0.00664
Низкий

7.5 High

CVSS2

Дефекты

CWE-89

Связанные уязвимости

github
почти 4 года назад

SQL injection vulnerability in wordspew-rss.php in the Wordspew plugin before 3.72 for Wordpress allows remote attackers to execute arbitrary SQL commands via the id parameter.

EPSS

Процентиль: 71%
0.00664
Низкий

7.5 High

CVSS2

Дефекты

CWE-89