Description
Multiple SQL injection vulnerabilities in Wordpress before 2.2.3 and Wordpress multi-user (MU) before 1.2.5a allow remote attackers to execute arbitrary SQL commands via the post_type parameter to the pingback.extensions.getPingbacks method in the XMLRPC interface, and other unspecified parameters related to "early database escaping" and missing validation of "query string like parameters."
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 14 | wordpress | 2.2.3-1 | — |
| Debian 13 | wordpress | 2.2.3-1 | — |
| Debian 12 | wordpress | 2.2.3-1 | — |
References
- ADV-2007-3132 vdb-entry
- wordpress-wordpressmu-pingback-sql-injection(36578) vdb-entry
- http://www.buayacorp.com/files/wordpress/wordpress-sql-injection-advisory.html
- FEDORA-2007-2143 vendor-advisory
- http://wordpress.org/development/2007/09/wordpress-223/
- 26771 third-party-advisory
- http://trac.wordpress.org/ticket/4770
- https://bugzilla.redhat.com/show_bug.cgi?id=285831
- 26796 third-party-advisory