Summary
generated automatically from NVD dataCVE-2005-2108 is a SQL injection flaw in the XMLRPC server of WordPress 1.5.1.2 and earlier. Input carried in the HTTP_RAW_POST_DATA variable, which stores the data in an XML file, is not properly filtered. A remote attacker could exploit this to run arbitrary SQL commands against the database. It is rated HIGH with a CVSS v2.0 score of 7.5.
NVD description
SQL injection vulnerability in XMLRPC server in WordPress 1.5.1.2 and earlier allows remote attackers to execute arbitrary SQL commands via input that is not filtered in the HTTP_RAW_POST_DATA variable, which stores the data in an XML file.
EPSS · FIRST.org
9.3%probability of exploitation in the next 30 days
Higher than 95% of scored CVEs
EPSS (Exploit Prediction Scoring System) estimates, from observed exploitation activity, how likely a CVE is to be exploited in the next 30 days. It complements CVSS, which measures severity, not likelihood. Score of 2026-10-19, recomputed daily by FIRST.org.
CVSS v2.0 Score
Information
- Published
- 5 juil. 2005
- Updated
- 16 juin 2026
- Status
- Modified
- Source
- cve@mitre.org
Affected products
Weaknesses (CWE)
References (6)
- http://secunia.com/advisories/15831PatchVendor Advisory
- http://www.gulftech.org/?node=research&article_id=00085-06282005ExploitVendor Advisory
- http://secunia.com/advisories/15831PatchVendor Advisory
- http://www.gulftech.org/?node=research&article_id=00085-06282005ExploitVendor Advisory
Similar CVEs
Other vulnerabilities of type
Monitor your products
Get automatic alerts for every new CVE affecting your equipment.