Description
SQL injection vulnerability in options.php in WordPress 2.2.1 allows remote authenticated administrators to execute arbitrary SQL commands via the page_options parameter to (1) options-general.php, (2) options-writing.php, (3) options-reading.php, (4) options-discussion.php, (5) options-privacy.php, (6) options-permalink.php, (7) options-misc.php, and possibly other unspecified components.
Remediation
References
Related Vulnerabilities
WordPress Plugin WordPress Calls to Action Cross-Site Scripting (2.2.7)
MySQL CVE-2015-0391 Vulnerability (CVE-2015-0391)
WordPress Plugin Flat Preloader Cross-Site Request Forgery (1.5.3)
Internet Information Services Configuration Vulnerability (CVE-2003-1566)
Contao Improper Encoding or Escaping of Output Vulnerability (CVE-2019-19714)