GSD-2007-1277
Vulnerability from gsd - Updated: 2023-12-13 01:21Details
WordPress 2.1.1, as downloaded from some official distribution sites during February and March 2007, contains an externally introduced backdoor that allows remote attackers to execute arbitrary commands via (1) an eval injection vulnerability in the ix parameter to wp-includes/feed.php, and (2) an untrusted passthru call in the iz parameter to wp-includes/theme.php.
Aliases
Aliases
{
"GSD": {
"alias": "CVE-2007-1277",
"description": "WordPress 2.1.1, as downloaded from some official distribution sites during February and March 2007, contains an externally introduced backdoor that allows remote attackers to execute arbitrary commands via (1) an eval injection vulnerability in the ix parameter to wp-includes/feed.php, and (2) an untrusted passthru call in the iz parameter to wp-includes/theme.php.",
"id": "GSD-2007-1277"
},
"gsd": {
"metadata": {
"exploitCode": "unknown",
"remediation": "unknown",
"reportConfidence": "confirmed",
"type": "vulnerability"
},
"osvSchema": {
"aliases": [
"CVE-2007-1277"
],
"details": "WordPress 2.1.1, as downloaded from some official distribution sites during February and March 2007, contains an externally introduced backdoor that allows remote attackers to execute arbitrary commands via (1) an eval injection vulnerability in the ix parameter to wp-includes/feed.php, and (2) an untrusted passthru call in the iz parameter to wp-includes/theme.php.",
"id": "GSD-2007-1277",
"modified": "2023-12-13T01:21:39.652628Z",
"schema_version": "1.4.0"
}
},
"namespaces": {
"cve.org": {
"CVE_data_meta": {
"ASSIGNER": "cve@mitre.org",
"ID": "CVE-2007-1277",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "n/a",
"version": {
"version_data": [
{
"version_value": "n/a"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "WordPress 2.1.1, as downloaded from some official distribution sites during February and March 2007, contains an externally introduced backdoor that allows remote attackers to execute arbitrary commands via (1) an eval injection vulnerability in the ix parameter to wp-includes/feed.php, and (2) an untrusted passthru call in the iz parameter to wp-includes/theme.php."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "n/a"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "20070303 WordPress source code compromised to enable remote code execution",
"refsource": "BUGTRAQ",
"url": "http://www.securityfocus.com/archive/1/461794/100/0/threaded"
},
{
"name": "VU#214480",
"refsource": "CERT-VN",
"url": "http://www.kb.cert.org/vuls/id/214480"
},
{
"name": "wordpress-theme-command-execution(32807)",
"refsource": "XF",
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/32807"
},
{
"name": "wordpress-feed-code-execution(32804)",
"refsource": "XF",
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/32804"
},
{
"name": "22797",
"refsource": "BID",
"url": "http://www.securityfocus.com/bid/22797"
},
{
"name": "ADV-2007-0812",
"refsource": "VUPEN",
"url": "http://www.vupen.com/english/advisories/2007/0812"
},
{
"name": "http://wordpress.org/development/2007/03/upgrade-212/",
"refsource": "CONFIRM",
"url": "http://wordpress.org/development/2007/03/upgrade-212/"
},
{
"name": "VU#641456",
"refsource": "CERT-VN",
"url": "http://www.kb.cert.org/vuls/id/641456"
},
{
"name": "http://ifsec.blogspot.com/2007/03/wordpress-code-compromised-to-enable.html",
"refsource": "MISC",
"url": "http://ifsec.blogspot.com/2007/03/wordpress-code-compromised-to-enable.html"
},
{
"name": "24374",
"refsource": "SECUNIA",
"url": "http://secunia.com/advisories/24374"
}
]
}
},
"nvd.nist.gov": {
"configurations": {
"CVE_data_version": "4.0",
"nodes": [
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:a:wordpress:wordpress:2.1.1:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
}
],
"operator": "OR"
}
]
},
"cve": {
"CVE_data_meta": {
"ASSIGNER": "cve@mitre.org",
"ID": "CVE-2007-1277"
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "en",
"value": "WordPress 2.1.1, as downloaded from some official distribution sites during February and March 2007, contains an externally introduced backdoor that allows remote attackers to execute arbitrary commands via (1) an eval injection vulnerability in the ix parameter to wp-includes/feed.php, and (2) an untrusted passthru call in the iz parameter to wp-includes/theme.php."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "en",
"value": "CWE-20"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "http://ifsec.blogspot.com/2007/03/wordpress-code-compromised-to-enable.html",
"refsource": "MISC",
"tags": [
"Exploit"
],
"url": "http://ifsec.blogspot.com/2007/03/wordpress-code-compromised-to-enable.html"
},
{
"name": "http://wordpress.org/development/2007/03/upgrade-212/",
"refsource": "CONFIRM",
"tags": [
"Vendor Advisory"
],
"url": "http://wordpress.org/development/2007/03/upgrade-212/"
},
{
"name": "VU#214480",
"refsource": "CERT-VN",
"tags": [
"US Government Resource"
],
"url": "http://www.kb.cert.org/vuls/id/214480"
},
{
"name": "VU#641456",
"refsource": "CERT-VN",
"tags": [
"US Government Resource"
],
"url": "http://www.kb.cert.org/vuls/id/641456"
},
{
"name": "22797",
"refsource": "BID",
"tags": [],
"url": "http://www.securityfocus.com/bid/22797"
},
{
"name": "24374",
"refsource": "SECUNIA",
"tags": [
"Vendor Advisory"
],
"url": "http://secunia.com/advisories/24374"
},
{
"name": "ADV-2007-0812",
"refsource": "VUPEN",
"tags": [],
"url": "http://www.vupen.com/english/advisories/2007/0812"
},
{
"name": "wordpress-theme-command-execution(32807)",
"refsource": "XF",
"tags": [],
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/32807"
},
{
"name": "wordpress-feed-code-execution(32804)",
"refsource": "XF",
"tags": [],
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/32804"
},
{
"name": "20070303 WordPress source code compromised to enable remote code execution",
"refsource": "BUGTRAQ",
"tags": [],
"url": "http://www.securityfocus.com/archive/1/461794/100/0/threaded"
}
]
}
},
"impact": {
"baseMetricV2": {
"cvssV2": {
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 7.5,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"exploitabilityScore": 10.0,
"impactScore": 6.4,
"obtainAllPrivilege": false,
"obtainOtherPrivilege": false,
"obtainUserPrivilege": true,
"severity": "HIGH",
"userInteractionRequired": false
}
},
"lastModifiedDate": "2018-10-16T16:37Z",
"publishedDate": "2007-03-05T20:19Z"
}
}
}
Loading…
Loading…
Experimental. This forecast is provided for visualization only and may change without notice. Do not use it for operational decisions.
Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.
Sightings
| Author | Source | Type | Date | Other |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Loading…
Loading…