WordPress 2.0.5 - Trackback UTF-7 SQL Injection

admin

0
文章

0
评论

2023-12-13 17:23:39 Ali_nvd 来源：ZONE.CI 全球网 0 阅读模式

中危 WordPress 2.0.5 - Trackback UTF-7 SQL Injection

CVE编号

CVE-2007-0107

利用情况

POC 已公开

补丁情况

官方补丁

披露时间

2007-01-09

漏洞描述

WordPress before 2.0.6, when mbstring is enabled for PHP, decodes alternate character sets after escaping the SQL query, which allows remote attackers to bypass SQL injection protection schemes and execute arbitrary SQL commands via multibyte charsets, as demonstrated using UTF-7.

解决建议

建议您更新当前系统或软件至最新版，完成漏洞的修复。

参考链接
http://osvdb.org/31579
http://secunia.com/advisories/23595
http://secunia.com/advisories/23741
http://security.gentoo.org/glsa/glsa-200701-10.xml
http://securityreason.com/securityalert/2112
http://wordpress.org/development/2007/01/wordpress-206/
http://www.hardened-php.net/advisory_022007.141.html
http://www.openpkg.com/security/advisories/OpenPKG-SA-2007.005.html
http://www.securityfocus.com/archive/1/456049/100/0/threaded
http://www.securityfocus.com/bid/21907
http://www.vupen.com/english/advisories/2007/0061
https://exchange.xforce.ibmcloud.com/vulnerabilities/31297

受影响软件情况

1
#	类型	厂商	产品	版本	影响面
	运行在以下环境
	应用	wordpress	wordpress	*		Up to (including) 2.0.5
	运行在以下环境
	系统	debian_10	wordpress	*		Up to (excluding) 2.0.6-1
	运行在以下环境
	系统	debian_11	wordpress	*		Up to (excluding) 2.0.6-1
	运行在以下环境
	系统	debian_12	wordpress	*		Up to (excluding) 2.0.6-1
	运行在以下环境
	系统	debian_sid	wordpress	*		Up to (excluding) 2.0.6-1