CVE-2008-0682

SQL injection vulnerability in wordspew-rss.php in the Wordspew plugin before 3.72 for Wordpress allows remote attackers to execute arbitrary SQL commands via the id parameter.
SQL Injection
Severity
UNKNOWN
AV:N/AC:L/Au:N/C:P/I:P/A:P
Atk. Vector
NETWORK
Atk. Complexity
LOW
Base Score
CVSS 3.x
EPSS Score
Percentile: 60%
VendorProductVersion
wordpresswordspew
𝑥
≤ 3.71
wordpresswordspew
1.6
wordpresswordspew
1.7
wordpresswordspew
1.8
wordpresswordspew
2.0
wordpresswordspew
2.1
wordpresswordspew
2.2
wordpresswordspew
2.3
wordpresswordspew
2.5
wordpresswordspew
2.6
wordpresswordspew
2.7
wordpresswordspew
2.8
wordpresswordspew
2.9
wordpresswordspew
2.31
wordpresswordspew
2.32
wordpresswordspew
2.85
wordpresswordspew
2.91
wordpresswordspew
2.92
wordpresswordspew
2.93
wordpresswordspew
2.94
wordpresswordspew
2.95
wordpresswordspew
3.0
wordpresswordspew
3.01
wordpresswordspew
3.1
wordpresswordspew
3.2
wordpresswordspew
3.02
wordpresswordspew
3.3
wordpresswordspew
3.6
wordpresswordspew
3.7
wordpresswordspew
3.15
wordpresswordspew
3.16
wordpresswordspew
3.021
wordpresswordspew
3.022
wordpresswordspew
3.31
wordpresswordspew
3.32
wordpresswordspew
3.33
wordpresswordspew
3.34
wordpresswordspew
3.51
wordpresswordspew
3.52
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
http://pierre.sudarovich.free.fr/index.php/2006/02/28/ajax-shoutbox/
http://secunia.com/advisories/28767
http://www.securityfocus.com/bid/27583
https://www.exploit-db.com/exploits/5039