Description
SQL injection vulnerability in XMLRPC server in WordPress 1.5.1.2 and earlier allows remote attackers to execute arbitrary SQL commands via input that is not filtered in the HTTP_RAW_POST_DATA variable, which stores the data in an XML file.
Remediation
References
Related Vulnerabilities
Apache Traffic Server Memory Disclosure Vulnerability (CVE-2020-17508)
WordPress Plugin Event Management Tickets Booking By Event Monster Cross-Site Scripting (1.0.7)
WordPress Plugin U Extended Comment 'fileurl' Parameter Arbitrary File Download (1.0.1)
WordPress Plugin Spam Free WordPress Security Bypass (1.9.2)
Joomla! Core 2.5.x Clickjacking Vulnerability (2.5.0 - 2.5.7)