CVE-2008-0682 WordSpew <= 3.71 - SQL Injection
HighCVSS 7.5
EPSS 2.8%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
SQL injection vulnerability in wordspew-rss.php in the Wordspew plugin before 3.72 for Wordpress allows remote attackers to execute arbitrary SQL commands via the id parameter.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| wordpress wordspew | <= 3.71 | No fix listed |
| wordpress wordspew | = 1.6 | No fix listed |
| wordpress wordspew | = 1.7 | No fix listed |
| wordpress wordspew | = 1.8 | No fix listed |
| wordpress wordspew | = 2.0 | No fix listed |
| wordpress wordspew | = 2.1 | No fix listed |
| wordpress wordspew | = 2.2 | No fix listed |
| wordpress wordspew | = 2.3 | No fix listed |
| wordpress wordspew | = 2.5 | No fix listed |
| wordpress wordspew | = 2.6 | No fix listed |
| wordpress wordspew | = 2.7 | No fix listed |
| wordpress wordspew | = 2.8 | No fix listed |
| wordpress wordspew | = 2.9 | No fix listed |
| wordpress wordspew | = 2.31 | No fix listed |
| wordpress wordspew | = 2.32 | No fix listed |
| wordpress wordspew | = 2.85 | No fix listed |
| wordpress wordspew | = 2.91 | No fix listed |
| wordpress wordspew | = 2.92 | No fix listed |
| wordpress wordspew | = 2.93 | No fix listed |
| wordpress wordspew | = 2.94 | No fix listed |
| wordpress wordspew | = 2.95 | No fix listed |
| wordpress wordspew | = 3.0 | No fix listed |
| wordpress wordspew | = 3.01 | No fix listed |
| wordpress wordspew | = 3.1 | No fix listed |
| wordpress wordspew | = 3.2 | No fix listed |
Show 15 more
| Product | Affected versions | Fixed in |
|---|---|---|
| wordpress wordspew | = 3.02 | No fix listed |
| wordpress wordspew | = 3.3 | No fix listed |
| wordpress wordspew | = 3.6 | No fix listed |
| wordpress wordspew | = 3.7 | No fix listed |
| wordpress wordspew | = 3.15 | No fix listed |
| wordpress wordspew | = 3.16 | No fix listed |
| wordpress wordspew | = 3.021 | No fix listed |
| wordpress wordspew | = 3.022 | No fix listed |
| wordpress wordspew | = 3.31 | No fix listed |
| wordpress wordspew | = 3.32 | No fix listed |
| wordpress wordspew | = 3.33 | No fix listed |
| wordpress wordspew | = 3.34 | No fix listed |
| wordpress wordspew | = 3.51 | No fix listed |
| wordpress wordspew | = 3.52 | No fix listed |
| wordpress wordspew(WordPress) | <= 3.71 | No fix listed |
References
- pierre.sudarovich.free.fr
- 28767 third-party-advisory vendor-advisory
- 27583 vdb-entry
- 5039 exploit
- Wordfence Intelligence third-party-advisory
- www.cve.org