PT-2011-4261

CVE-2011-3130

Publicado

2011-08-10

Atualizado

2017-08-29

Descrição por

CVSS 2.0

7.5

Alta

MétricasAV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions WordPress versions 3.1 through 3.1.2 WordPress versions 3.2 before Beta 2

Description The issue is related to "Taxonomy query hardening" and may involve SQL injection, although the exact impact and attack vectors are not specified.

Recommendations For WordPress versions 3.1 through 3.1.2, update to version 3.1.3 or later. For WordPress versions 3.2 before Beta 2, update to Beta 2 or later.

Explorabilidade

Correção

Impactos

Pesquisadores

Jesse Ou

Richard Lundeen

Fornecedores

Produtos afetados

Enumeração de fraquezas

CWE-89: Improper Neutralization of Special Elements used in an SQL Command (\'SQL Injection\')

Identificadores relacionados

CVE-2011-3130