Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
SQL injection vulnerability in wp-includes/query.php in WordPress 2.3.1 and earlier allows remote attackers to execute arbitrary SQL commands via the s parameter, when DB_CHARSET is set to (1) Big5, (2) GBK, or possibly other character set encodings that support a "\" in a multibyte character.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
WordPress wp-db.php文件字符集SQL注入漏洞
Vulnerability Description
WordPress是一款免费的论坛Blog系统。 WordPress处理用户数据时存在漏洞，远程攻击者可能利用此漏洞执行SQL注入攻击。 WordPress中的大多数数据库查询使用escape()方式过滤SQL字符串，实际上是通过addslashes()函数过滤输入，而addslashes()函数没有考虑SQL字符串中所使用的字符集，盲目的向单引号前插入反斜线，这样的反斜线可能会形成其他有效的字符。以下是wp-includes/query.php中的漏洞代码： // If a search pattern
CVSS Information
N/A
Vulnerability Type
N/A