Unscored CVE-2012-1067 EUVD-2012-1104GHSA-f2vh-2fr3-3pmx

SQL injection vulnerability in the WP-RecentComments plugin 2.0.7 for WordPress allows remote attackers to execute arbitrary SQL commands v…

Published Feb 14, 2012 · Updated Aug 6, 2024 · Assigned by mitre

Description

SQL injection vulnerability in the WP-RecentComments plugin 2.0.7 for WordPress allows remote attackers to execute arbitrary SQL commands via the id parameter in an rc-content action to index.php. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.

References

78820 vdb-entry
47870 third-party-advisory
wprecentcomments-index-sql-injection(72951) vdb-entry
51859 vdb-entry