CVE-2010-4257

MOYENNE 6.0CVE-2010-4257 · Published 07/12/2010 · updated 16/06/2026

En bref

CVE-2010-4257 est une vulnérabilité MOYENNE (CVSS 6.0) touchant wordpress (wordpress).
Probabilité d'exploitation dans les 30 prochains jours (EPSS) : 3.1%, plus élevée que 87.9% des vulnérabilités.
Aucune version corrigée n'est encore connue : suivez l'avis de l'éditeur dans les références.

Package	Affected versions	Patched versions
wordpress wordpress	`≤ 3.0.1`	No fix yet

Description

SQL injection vulnerability in the do_trackbacks function in wp-includes/comment.php in WordPress before 3.0.2 allows remote authenticated users to execute arbitrary SQL commands via the Send Trackbacks field.

References

blog.sjinks.pro/wordpress/858-information-disclosure-via-sql-injection-attack · Broken Link
bugs.debian.org/cgi-bin/bugreport.cgi · Issue Tracking
codex.wordpress.org/Version_3.0.2 · Vendor Advisory
core.trac.wordpress.org/changeset/16625 · Vendor Advisory
lists.fedoraproject.org/pipermail/package-announce/2011-January/052879.html · Third Party Advisory
lists.fedoraproject.org/pipermail/package-announce/2011-January/052892.html · Third Party Advisory
lists.fedoraproject.org/pipermail/package-announce/2011-January/052917.html · Third Party Advisory
lists.fedoraproject.org/pipermail/package-announce/2011-January/052932.html · Third Party Advisory
secunia.com/advisories/42431 · Third Party Advisory
secunia.com/advisories/42753 · Third Party Advisory

Autres vulnérabilités de wordpress

Tout voir →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free