Description
SQL injection vulnerability in wp-includes/query.php in WordPress 2.3.1 and earlier allows remote attackers to execute arbitrary SQL commands via the s parameter, when DB_CHARSET is set to (1) Big5, (2) GBK, or possibly other character set encodings that support a "\" in a multibyte character.
Remediation
References
Related Vulnerabilities
PHP Other Vulnerability (CVE-2002-2215)
WordPress Plugin Testimonial Slider Cross-Site Scripting (1.2.1)
Atlassian Jira CVE-2021-43947 Vulnerability (CVE-2021-43947)
WordPress Plugin Widget Logic Cross-Site Request Forgery (5.9.0)
Nexus Repository Manager CVE-2019-15893 Vulnerability (CVE-2019-15893)