SQL Injection Vulnerability in bbPress by Automatic
CVE-2007-3244

Currently unrated

Key Information:

Vendor

Bbpress

Status
Bbpress
Vendor
CVE Published:
15 June 2007

What is CVE-2007-3244?

An SQL injection vulnerability exists in bbPress prior to version 0.8.1 within the file bb-includes/formatting-functions.php. This flaw can allow remote attackers to manipulate database queries, potentially executing arbitrary SQL commands via unknown vectors, notably through the forums/bb-edit.php functionality. This vulnerability, commonly referred to as the 'quircky slashes bug,' underscores the need for website administrators to implement security patches and ensure their applications are up to date.

References

http://trac.bbpress.org/changeset/717
x_refsource_CONFIRM
http://www.vupen.com/english/advisories/2007/2219
vdb-entryx_refsource_VUPEN
http://bbpress.org/blog/2007/02/bbpress-081/
x_refsource_CONFIRM

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.