Description

SQL injection vulnerability in the do_trackbacks function in wp-includes/comment.php in WordPress before 3.0.2 allows remote authenticated users to execute arbitrary SQL commands via the Send Trackbacks field.

Remediation

References

CVE-2010-4257

Related Vulnerabilities

Atlassian Jira Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2019-20405)

WordPress Plugin External Links-nofollow, noopener & new window Cross-Site Request Forgery (2.57)

WordPress Plugin Simple Personal Message SQL Injection (1.0.3)

WordPress Plugin Captcha by BestWebSoft Cross-Site Scripting (4.2.9)

Drupal Core 8.6.x Multiple Vulnerabilities (8.6.0 - 8.6.1)

Severity

Medium

Tags

Missing Update Known Vulnerabilities CWE-138 CVE-2010-4257