CVE-2003-1598

Publication date 1 October 2014

Last updated 24 July 2024

Ubuntu priority

Medium

Why this priority?

Description

WordPress 0.7 (b2 cafelog code) allows SQL injection. / Blog.header.php. $ posts not converted to an integer, so we can inject sql in this variable. In MySQL 4.x can use UNION and subselects to obtain privileges.

Status

Package Ubuntu Release Status
wordpress 12.04 LTS precise
Not affected
11.10 oneiric
Not affected
11.04 natty
Not affected
10.04 LTS lucid
Not affected
8.04 LTS hardy
Not affected

References

Other references

Access our resources on patching vulnerabilities