GLSA Advocate
Joined: 12 May 2004 Posts: 2663
|
Posted: Sat Mar 04, 2006 4:26 pm Post subject: [ GLSA 200603-01 ] WordPress: SQL injection vulnerability |
|
|
Gentoo Linux Security Advisory
Title: WordPress: SQL injection vulnerability (GLSA 200603-01)
Severity: normal
Exploitable: remote
Date: March 04, 2006
Bug(s): #121661
ID: 200603-01
Synopsis
WordPress is vulnerable to an SQL injection vulnerability.
Background
WordPress is a PHP and MySQL based content management and publishing system.
Affected Packages
Package: www-apps/wordpress
Vulnerable: <= 1.5.2
Unaffected: >= 2.0.1
Architectures: All supported architectures
Description
Patrik Karlsson reported that WordPress 1.5.2 makes use of an insufficiently filtered User Agent string in SQL queries related to comments posting. This vulnerability was already fixed in the 2.0-series of WordPress.
Impact
An attacker could send a comment with a malicious User Agent parameter, resulting in SQL injection and potentially in the subversion of the WordPress database. This vulnerability wouldn't affect WordPress sites which do not allow comments or which require that comments go through a moderator.
Workaround
Disable or moderate comments on your WordPress blogs.
Resolution
All WordPress users should upgrade to the latest version: Code: | # emerge --sync
# emerge --ask --oneshot --verbose ">=www-apps/wordpress-2.0.1" |
References
CVE-2006-1012
Last edited by GLSA on Sun Jan 27, 2008 4:18 am; edited 3 times in total |
|