CVE-2007-0107 EXPLOIT
6.8
MEDIUM · CVSS 2.0 · EPSS 11.4% (pctl 96)
Patch early
A public exploit exists.
Description
WordPress before 2.0.6, when mbstring is enabled for PHP, decodes alternate character sets after escaping the SQL query, which allows remote attackers to bypass SQL injection protection schemes and execute arbitrary SQL commands via multibyte charsets, as demonstrated using UTF-7.
Scoring
| CVSS | 6.8 (MEDIUM, v2.0) |
|---|---|
| Vector | AV:N/AC:M/Au:N/C:P/I:P/A:P |
| EPSS | 11.42% — more likely to be exploited than 96% of all CVEs |
| On CISA KEV | no |
| Public exploit | yes |
| Published | 2007-01-09 |
| Last modified | 2026-06-16 |
Affected (1)
| Vendor | Product |
|---|---|
| wordpress | wordpress |
Public exploits
| Source | Title | Date |
|---|---|---|
| exploit-db | WordPress Core 2.0.5 - Trackback UTF-7 SQL Injection | 2007-01-07 |
References
- http://osvdb.org/31579
- http://secunia.com/advisories/23595
- http://secunia.com/advisories/23741
- http://security.gentoo.org/glsa/glsa-200701-10.xml
- http://securityreason.com/securityalert/2112
- http://wordpress.org/development/2007/01/wordpress-206/
- http://www.hardened-php.net/advisory_022007.141.html
- http://www.openpkg.com/security/advisories/OpenPKG-SA-2007.005.html
- http://www.securityfocus.com/archive/1/456049/100/0/threaded
- http://www.securityfocus.com/bid/21907
- http://www.vupen.com/english/advisories/2007/0061
- https://exchange.xforce.ibmcloud.com/vulnerabilities/31297
- http://osvdb.org/31579
- http://secunia.com/advisories/23595
- http://secunia.com/advisories/23741
- http://security.gentoo.org/glsa/glsa-200701-10.xml
- http://securityreason.com/securityalert/2112
- http://wordpress.org/development/2007/01/wordpress-206/
- http://www.hardened-php.net/advisory_022007.141.html
- http://www.openpkg.com/security/advisories/OpenPKG-SA-2007.005.html
→ the Explorer · watch your stack · NVD