1. CVE-Search
  2. CVE-2007-2821
ID CVE-2007-2821
Summary SQL injection vulnerability in wp-admin/admin-ajax.php in WordPress before 2.2 allows remote attackers to execute arbitrary SQL commands via the cookie parameter.
References
Vulnerable Configurations
  • cpe:2.3:a:wordpress:wordpress:-:*:*:*:*:*:*:*
    cpe:2.3:a:wordpress:wordpress:-:*:*:*:*:*:*:*
  • cpe:2.3:a:wordpress:wordpress:0.71:*:*:*:*:*:*:*
    cpe:2.3:a:wordpress:wordpress:0.71:*:*:*:*:*:*:*
  • cpe:2.3:a:wordpress:wordpress:0.71:-:*:*:*:*:*:*
    cpe:2.3:a:wordpress:wordpress:0.71:-:*:*:*:*:*:*
  • cpe:2.3:a:wordpress:wordpress:0.71:beta:*:*:*:*:*:*
    cpe:2.3:a:wordpress:wordpress:0.71:beta:*:*:*:*:*:*
  • cpe:2.3:a:wordpress:wordpress:0.71:beta3:*:*:*:*:*:*
    cpe:2.3:a:wordpress:wordpress:0.71:beta3:*:*:*:*:*:*
  • cpe:2.3:a:wordpress:wordpress:0.72:beta1:*:*:*:*:*:*
    cpe:2.3:a:wordpress:wordpress:0.72:beta1:*:*:*:*:*:*
  • cpe:2.3:a:wordpress:wordpress:0.72:beta2:*:*:*:*:*:*
    cpe:2.3:a:wordpress:wordpress:0.72:beta2:*:*:*:*:*:*
  • cpe:2.3:a:wordpress:wordpress:0.72:rc1:*:*:*:*:*:*
    cpe:2.3:a:wordpress:wordpress:0.72:rc1:*:*:*:*:*:*
  • cpe:2.3:a:wordpress:wordpress:0.711:*:*:*:*:*:*:*
    cpe:2.3:a:wordpress:wordpress:0.711:*:*:*:*:*:*:*
  • cpe:2.3:a:wordpress:wordpress:1.0:*:*:*:*:*:*:*
    cpe:2.3:a:wordpress:wordpress:1.0:*:*:*:*:*:*:*
  • cpe:2.3:a:wordpress:wordpress:1.0:-:*:*:*:*:*:*
    cpe:2.3:a:wordpress:wordpress:1.0:-:*:*:*:*:*:*
  • cpe:2.3:a:wordpress:wordpress:1.0:rc1:*:*:*:*:*:*
    cpe:2.3:a:wordpress:wordpress:1.0:rc1:*:*:*:*:*:*
  • cpe:2.3:a:wordpress:wordpress:1.0.1:*:*:*:*:*:*:*
    cpe:2.3:a:wordpress:wordpress:1.0.1:*:*:*:*:*:*:*
  • cpe:2.3:a:wordpress:wordpress:1.0.1:-:*:*:*:*:*:*
    cpe:2.3:a:wordpress:wordpress:1.0.1:-:*:*:*:*:*:*
  • cpe:2.3:a:wordpress:wordpress:1.0.1:rc1:*:*:*:*:*:*
    cpe:2.3:a:wordpress:wordpress:1.0.1:rc1:*:*:*:*:*:*
  • cpe:2.3:a:wordpress:wordpress:1.0.2:*:*:*:*:*:*:*
    cpe:2.3:a:wordpress:wordpress:1.0.2:*:*:*:*:*:*:*
  • cpe:2.3:a:wordpress:wordpress:1.1.1:*:*:*:*:*:*:*
    cpe:2.3:a:wordpress:wordpress:1.1.1:*:*:*:*:*:*:*
  • cpe:2.3:a:wordpress:wordpress:1.2:*:*:*:*:*:*:*
    cpe:2.3:a:wordpress:wordpress:1.2:*:*:*:*:*:*:*
  • cpe:2.3:a:wordpress:wordpress:1.2:-:*:*:*:*:*:*
    cpe:2.3:a:wordpress:wordpress:1.2:-:*:*:*:*:*:*
  • cpe:2.3:a:wordpress:wordpress:1.2:beta:*:*:*:*:*:*
    cpe:2.3:a:wordpress:wordpress:1.2:beta:*:*:*:*:*:*
  • cpe:2.3:a:wordpress:wordpress:1.2:rc1:*:*:*:*:*:*
    cpe:2.3:a:wordpress:wordpress:1.2:rc1:*:*:*:*:*:*
  • cpe:2.3:a:wordpress:wordpress:1.2:rc2:*:*:*:*:*:*
    cpe:2.3:a:wordpress:wordpress:1.2:rc2:*:*:*:*:*:*
  • cpe:2.3:a:wordpress:wordpress:1.2.1:*:*:*:*:*:*:*
    cpe:2.3:a:wordpress:wordpress:1.2.1:*:*:*:*:*:*:*
  • cpe:2.3:a:wordpress:wordpress:1.2.2:*:*:*:*:*:*:*
    cpe:2.3:a:wordpress:wordpress:1.2.2:*:*:*:*:*:*:*
  • cpe:2.3:a:wordpress:wordpress:1.2.3:*:*:*:*:*:*:*
    cpe:2.3:a:wordpress:wordpress:1.2.3:*:*:*:*:*:*:*
  • cpe:2.3:a:wordpress:wordpress:1.2.4:*:*:*:*:*:*:*
    cpe:2.3:a:wordpress:wordpress:1.2.4:*:*:*:*:*:*:*
  • cpe:2.3:a:wordpress:wordpress:1.2.5:*:*:*:*:*:*:*
    cpe:2.3:a:wordpress:wordpress:1.2.5:*:*:*:*:*:*:*
  • cpe:2.3:a:wordpress:wordpress:1.2.5:a:*:*:*:*:*:*
    cpe:2.3:a:wordpress:wordpress:1.2.5:a:*:*:*:*:*:*
  • cpe:2.3:a:wordpress:wordpress:1.3:*:*:*:*:*:*:*
    cpe:2.3:a:wordpress:wordpress:1.3:*:*:*:*:*:*:*
  • cpe:2.3:a:wordpress:wordpress:1.3.2:*:*:*:*:*:*:*
    cpe:2.3:a:wordpress:wordpress:1.3.2:*:*:*:*:*:*:*
  • cpe:2.3:a:wordpress:wordpress:1.3.3:*:*:*:*:*:*:*
    cpe:2.3:a:wordpress:wordpress:1.3.3:*:*:*:*:*:*:*
  • cpe:2.3:a:wordpress:wordpress:1.5:*:*:*:*:*:*:*
    cpe:2.3:a:wordpress:wordpress:1.5:*:*:*:*:*:*:*
  • cpe:2.3:a:wordpress:wordpress:1.5.1:*:*:*:*:*:*:*
    cpe:2.3:a:wordpress:wordpress:1.5.1:*:*:*:*:*:*:*
  • cpe:2.3:a:wordpress:wordpress:1.5.1.1:*:*:*:*:*:*:*
    cpe:2.3:a:wordpress:wordpress:1.5.1.1:*:*:*:*:*:*:*
  • cpe:2.3:a:wordpress:wordpress:1.5.1.2:*:*:*:*:*:*:*
    cpe:2.3:a:wordpress:wordpress:1.5.1.2:*:*:*:*:*:*:*
  • cpe:2.3:a:wordpress:wordpress:1.5.1.3:*:*:*:*:*:*:*
    cpe:2.3:a:wordpress:wordpress:1.5.1.3:*:*:*:*:*:*:*
  • cpe:2.3:a:wordpress:wordpress:1.5.2:*:*:*:*:*:*:*
    cpe:2.3:a:wordpress:wordpress:1.5.2:*:*:*:*:*:*:*
  • cpe:2.3:a:wordpress:wordpress:1.6.2:*:*:*:*:*:*:*
    cpe:2.3:a:wordpress:wordpress:1.6.2:*:*:*:*:*:*:*
  • cpe:2.3:a:wordpress:wordpress:2.0:*:*:*:*:*:*:*
    cpe:2.3:a:wordpress:wordpress:2.0:*:*:*:*:*:*:*
  • cpe:2.3:a:wordpress:wordpress:2.0:-:*:*:*:*:*:*
    cpe:2.3:a:wordpress:wordpress:2.0:-:*:*:*:*:*:*
  • cpe:2.3:a:wordpress:wordpress:2.0:rc1:*:*:*:*:*:*
    cpe:2.3:a:wordpress:wordpress:2.0:rc1:*:*:*:*:*:*
  • cpe:2.3:a:wordpress:wordpress:2.0.1:*:*:*:*:*:*:*
    cpe:2.3:a:wordpress:wordpress:2.0.1:*:*:*:*:*:*:*
  • cpe:2.3:a:wordpress:wordpress:2.0.1:-:*:*:*:*:*:*
    cpe:2.3:a:wordpress:wordpress:2.0.1:-:*:*:*:*:*:*
  • cpe:2.3:a:wordpress:wordpress:2.0.1:rc1:*:*:*:*:*:*
    cpe:2.3:a:wordpress:wordpress:2.0.1:rc1:*:*:*:*:*:*
  • cpe:2.3:a:wordpress:wordpress:2.0.2:*:*:*:*:*:*:*
    cpe:2.3:a:wordpress:wordpress:2.0.2:*:*:*:*:*:*:*
  • cpe:2.3:a:wordpress:wordpress:2.0.3:*:*:*:*:*:*:*
    cpe:2.3:a:wordpress:wordpress:2.0.3:*:*:*:*:*:*:*
  • cpe:2.3:a:wordpress:wordpress:2.0.3:-:*:*:*:*:*:*
    cpe:2.3:a:wordpress:wordpress:2.0.3:-:*:*:*:*:*:*
  • cpe:2.3:a:wordpress:wordpress:2.0.4:*:*:*:*:*:*:*
    cpe:2.3:a:wordpress:wordpress:2.0.4:*:*:*:*:*:*:*
  • cpe:2.3:a:wordpress:wordpress:2.0.5:*:*:*:*:*:*:*
    cpe:2.3:a:wordpress:wordpress:2.0.5:*:*:*:*:*:*:*
  • cpe:2.3:a:wordpress:wordpress:2.0.5:-:*:*:*:*:*:*
    cpe:2.3:a:wordpress:wordpress:2.0.5:-:*:*:*:*:*:*
  • cpe:2.3:a:wordpress:wordpress:2.0.5:beta1:*:*:*:*:*:*
    cpe:2.3:a:wordpress:wordpress:2.0.5:beta1:*:*:*:*:*:*
  • cpe:2.3:a:wordpress:wordpress:2.0.5:rc1:*:*:*:*:*:*
    cpe:2.3:a:wordpress:wordpress:2.0.5:rc1:*:*:*:*:*:*
  • cpe:2.3:a:wordpress:wordpress:2.0.6:*:*:*:*:*:*:*
    cpe:2.3:a:wordpress:wordpress:2.0.6:*:*:*:*:*:*:*
  • cpe:2.3:a:wordpress:wordpress:2.0.6:-:*:*:*:*:*:*
    cpe:2.3:a:wordpress:wordpress:2.0.6:-:*:*:*:*:*:*
  • cpe:2.3:a:wordpress:wordpress:2.0.6:beta1:*:*:*:*:*:*
    cpe:2.3:a:wordpress:wordpress:2.0.6:beta1:*:*:*:*:*:*
  • cpe:2.3:a:wordpress:wordpress:2.0.6:rc1:*:*:*:*:*:*
    cpe:2.3:a:wordpress:wordpress:2.0.6:rc1:*:*:*:*:*:*
  • cpe:2.3:a:wordpress:wordpress:2.0.6:rc2:*:*:*:*:*:*
    cpe:2.3:a:wordpress:wordpress:2.0.6:rc2:*:*:*:*:*:*
  • cpe:2.3:a:wordpress:wordpress:2.0.7:*:*:*:*:*:*:*
    cpe:2.3:a:wordpress:wordpress:2.0.7:*:*:*:*:*:*:*
  • cpe:2.3:a:wordpress:wordpress:2.0.7:-:*:*:*:*:*:*
    cpe:2.3:a:wordpress:wordpress:2.0.7:-:*:*:*:*:*:*
  • cpe:2.3:a:wordpress:wordpress:2.0.7:rc1:*:*:*:*:*:*
    cpe:2.3:a:wordpress:wordpress:2.0.7:rc1:*:*:*:*:*:*
  • cpe:2.3:a:wordpress:wordpress:2.0.7:rc2:*:*:*:*:*:*
    cpe:2.3:a:wordpress:wordpress:2.0.7:rc2:*:*:*:*:*:*
  • cpe:2.3:a:wordpress:wordpress:2.0.8:*:*:*:*:*:*:*
    cpe:2.3:a:wordpress:wordpress:2.0.8:*:*:*:*:*:*:*
  • cpe:2.3:a:wordpress:wordpress:2.0.8:-:*:*:*:*:*:*
    cpe:2.3:a:wordpress:wordpress:2.0.8:-:*:*:*:*:*:*
  • cpe:2.3:a:wordpress:wordpress:2.0.8:rc1:*:*:*:*:*:*
    cpe:2.3:a:wordpress:wordpress:2.0.8:rc1:*:*:*:*:*:*
  • cpe:2.3:a:wordpress:wordpress:2.0.9:*:*:*:*:*:*:*
    cpe:2.3:a:wordpress:wordpress:2.0.9:*:*:*:*:*:*:*
  • cpe:2.3:a:wordpress:wordpress:2.0.9:-:*:*:*:*:*:*
    cpe:2.3:a:wordpress:wordpress:2.0.9:-:*:*:*:*:*:*
  • cpe:2.3:a:wordpress:wordpress:2.0.9:beta1:*:*:*:*:*:*
    cpe:2.3:a:wordpress:wordpress:2.0.9:beta1:*:*:*:*:*:*
  • cpe:2.3:a:wordpress:wordpress:2.0.9:rc1:*:*:*:*:*:*
    cpe:2.3:a:wordpress:wordpress:2.0.9:rc1:*:*:*:*:*:*
  • cpe:2.3:a:wordpress:wordpress:2.0.10:*:*:*:*:*:*:*
    cpe:2.3:a:wordpress:wordpress:2.0.10:*:*:*:*:*:*:*
  • cpe:2.3:a:wordpress:wordpress:2.0.10:-:*:*:*:*:*:*
    cpe:2.3:a:wordpress:wordpress:2.0.10:-:*:*:*:*:*:*
  • cpe:2.3:a:wordpress:wordpress:2.0.10:rc1:*:*:*:*:*:*
    cpe:2.3:a:wordpress:wordpress:2.0.10:rc1:*:*:*:*:*:*
  • cpe:2.3:a:wordpress:wordpress:2.0.10:rc2:*:*:*:*:*:*
    cpe:2.3:a:wordpress:wordpress:2.0.10:rc2:*:*:*:*:*:*
  • cpe:2.3:a:wordpress:wordpress:2.0.10:rc3:*:*:*:*:*:*
    cpe:2.3:a:wordpress:wordpress:2.0.10:rc3:*:*:*:*:*:*
  • cpe:2.3:a:wordpress:wordpress:2.0.11:*:*:*:*:*:*:*
    cpe:2.3:a:wordpress:wordpress:2.0.11:*:*:*:*:*:*:*
  • cpe:2.3:a:wordpress:wordpress:2.0.11:-:*:*:*:*:*:*
    cpe:2.3:a:wordpress:wordpress:2.0.11:-:*:*:*:*:*:*
  • cpe:2.3:a:wordpress:wordpress:2.0.11:rc1:*:*:*:*:*:*
    cpe:2.3:a:wordpress:wordpress:2.0.11:rc1:*:*:*:*:*:*
  • cpe:2.3:a:wordpress:wordpress:2.0.11:rc2:*:*:*:*:*:*
    cpe:2.3:a:wordpress:wordpress:2.0.11:rc2:*:*:*:*:*:*
  • cpe:2.3:a:wordpress:wordpress:2.0.11:rc3:*:*:*:*:*:*
    cpe:2.3:a:wordpress:wordpress:2.0.11:rc3:*:*:*:*:*:*
  • cpe:2.3:a:wordpress:wordpress:2.1:*:*:*:*:*:*:*
    cpe:2.3:a:wordpress:wordpress:2.1:*:*:*:*:*:*:*
  • cpe:2.3:a:wordpress:wordpress:2.1:-:*:*:*:*:*:*
    cpe:2.3:a:wordpress:wordpress:2.1:-:*:*:*:*:*:*
  • cpe:2.3:a:wordpress:wordpress:2.1:beta1:*:*:*:*:*:*
    cpe:2.3:a:wordpress:wordpress:2.1:beta1:*:*:*:*:*:*
  • cpe:2.3:a:wordpress:wordpress:2.1:beta2:*:*:*:*:*:*
    cpe:2.3:a:wordpress:wordpress:2.1:beta2:*:*:*:*:*:*
  • cpe:2.3:a:wordpress:wordpress:2.1:beta3:*:*:*:*:*:*
    cpe:2.3:a:wordpress:wordpress:2.1:beta3:*:*:*:*:*:*
  • cpe:2.3:a:wordpress:wordpress:2.1:beta4:*:*:*:*:*:*
    cpe:2.3:a:wordpress:wordpress:2.1:beta4:*:*:*:*:*:*
  • cpe:2.3:a:wordpress:wordpress:2.1:rc1:*:*:*:*:*:*
    cpe:2.3:a:wordpress:wordpress:2.1:rc1:*:*:*:*:*:*
  • cpe:2.3:a:wordpress:wordpress:2.1:rc2:*:*:*:*:*:*
    cpe:2.3:a:wordpress:wordpress:2.1:rc2:*:*:*:*:*:*
  • cpe:2.3:a:wordpress:wordpress:2.1.1:*:*:*:*:*:*:*
    cpe:2.3:a:wordpress:wordpress:2.1.1:*:*:*:*:*:*:*
  • cpe:2.3:a:wordpress:wordpress:2.1.1:-:*:*:*:*:*:*
    cpe:2.3:a:wordpress:wordpress:2.1.1:-:*:*:*:*:*:*
  • cpe:2.3:a:wordpress:wordpress:2.1.1:beta1:*:*:*:*:*:*
    cpe:2.3:a:wordpress:wordpress:2.1.1:beta1:*:*:*:*:*:*
  • cpe:2.3:a:wordpress:wordpress:2.1.1:rc1:*:*:*:*:*:*
    cpe:2.3:a:wordpress:wordpress:2.1.1:rc1:*:*:*:*:*:*
  • cpe:2.3:a:wordpress:wordpress:2.1.2:*:*:*:*:*:*:*
    cpe:2.3:a:wordpress:wordpress:2.1.2:*:*:*:*:*:*:*
  • cpe:2.3:a:wordpress:wordpress:2.1.3:*:*:*:*:*:*:*
    cpe:2.3:a:wordpress:wordpress:2.1.3:*:*:*:*:*:*:*
  • cpe:2.3:a:wordpress:wordpress:2.1.3:-:*:*:*:*:*:*
    cpe:2.3:a:wordpress:wordpress:2.1.3:-:*:*:*:*:*:*
  • cpe:2.3:a:wordpress:wordpress:2.1.3:rc1:*:*:*:*:*:*
    cpe:2.3:a:wordpress:wordpress:2.1.3:rc1:*:*:*:*:*:*
  • cpe:2.3:a:wordpress:wordpress:2.1.3:rc2:*:*:*:*:*:*
    cpe:2.3:a:wordpress:wordpress:2.1.3:rc2:*:*:*:*:*:*
  • cpe:2.3:a:wordpress:wordpress:2.1.3:rc3:*:*:*:*:*:*
    cpe:2.3:a:wordpress:wordpress:2.1.3:rc3:*:*:*:*:*:*
CVSS
Base: 7.5 (as of 16-10-2018 - 16:45)
Impact:
Exploitability:
CWE NVD-CWE-Other
CAPEC
Access
VectorComplexityAuthentication
NETWORK LOW NONE
Impact
ConfidentialityIntegrityAvailability
PARTIAL PARTIAL PARTIAL
cvss-vector via4 AV:N/AC:L/Au:N/C:P/I:P/A:P
refmap via4
bid 24076
bugtraq 20070521 [waraxe-2007-SA#050] - Sql Injection in WordPress 2.1.3
debian DSA-1502
exploit-db 3960
misc http://www.waraxe.us/advisory-50.html
osvdb 36311
secunia
  • 25345
  • 29014
vupen ADV-2007-1889
xf wordpress-adminajax-sql-injection(34399)
Last major update 16-10-2018 - 16:45
Published 22-05-2007 - 21:30
Last modified 16-10-2018 - 16:45
Back to Top