CVE-2006-1012

HIGH

SQL injection vulnerability in WordPress 1.5.2, and possibly other versions before 2.0, allows remote attackers to execute arbitrary SQL commands via the User-Agent field in an HTTP header for a comment.

Score CVSS v2.0

7.5

/ 10.0

HIGH

AV:N/AC:L/Au:N/C:P/I:P/A:P

Informations

Publié: 6 mars 2006
Mis à jour: 16 avr. 2026
Statut: Modified
Source: cve@mitre.org

Produits affectés

wordpress wordpressToutes les CVE WordPress →

Versions : 1.5.2

Faiblesses (CWE)

NVD-CWE-Other

Références (10)

http://secunia.com/advisories/19109
PatchVendor Advisory
http://secunia.com/advisories/19123
http://www.gentoo.org/security/en/glsa/glsa-200603-01.xml
PatchVendor Advisory
http://www.securityfocus.com/bid/16950
https://exchange.xforce.ibmcloud.com/vulnerabilities/25321
http://secunia.com/advisories/19109
PatchVendor Advisory
http://secunia.com/advisories/19123
http://www.gentoo.org/security/en/glsa/glsa-200603-01.xml
PatchVendor Advisory
http://www.securityfocus.com/bid/16950
https://exchange.xforce.ibmcloud.com/vulnerabilities/25321

Surveillez vos produits

Recevez une alerte automatique à chaque nouvelle CVE affectant vos équipements.

Activer la surveillance