CVE-2012-1067

Currently unrated

Key Information:

Vendor: Wordpress
Status: WP-recentcomments
Vendor: CVE Published:; 14 February 2012

Summary

SQL injection vulnerability in the WP-RecentComments plugin 2.0.7 for WordPress allows remote attackers to execute arbitrary SQL commands via the id parameter in an rc-content action to index.php. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.

References

http://osvdb.org/78820

vdb-entryx_refsource_OSVDB

http://secunia.com/advisories/47870

third-party-advisoryx_refsource_SECUNIA

https://exchange.xforce.ibmcloud.com/vulnerabilities/72951

vdb-entryx_refsource_XF

Timeline

Vulnerability published
Feb 14, 2012
Vulnerability Reserved
Feb 14, 2012