Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2006-1012
7.5
HIGHCVSS v2
Published
March 6, 2006
Affected
1 project
Assigned by
MITRE
Severity scale
010
Description
SQL injection vulnerability in WordPress 1.5.2, and possibly other versions before 2.0, allows remote attackers to execute arbitrary SQL commands via the User-Agent field in an HTTP header for a comment.
WordPress/WordPress
GitHubWordPress, Git-ified. This repository is just a mirror of the WordPress subversion repository. Please do not send pull requests. Submit pull requests to https://github.com/WordPress/wordpress-develop and patches to https://core.trac.wordpress.org/ instead.
GitHubWordPress, Git-ified. This repository is just a mirror of the WordPress subversion repository. Please do not send pull requests. Submit pull requests to https://github.com/WordPress/wordpress-develop and patches to https://core.trac.wordpress.org/ instead.= 1.5.2NVD