CVE:CVE-2008-0682
CNNVD:CNNVD-200802-183
Wordspew插件的wordspew-rss.php存在SQL注入漏洞。远程攻击者通过id参数来执行任意SQL命令。
solution:Upgrade wordpress wordspew to a higher version than 3.71,1.6,1.7,1.8,2.0,2.1,2.2,2.3,2.5,2.6,2.7,2.8,2.9,2.31,2.32,2.85,2.91,2.92,2.93,2.94,2.95,3.0,3.01,3.1,3.2,3.02,3.3,3.6,3.7,3.15,3.16,3.021,3.022,3.31,3.32,3.33,3.34,3.51,3.52,and avoid the version (,3.71],1.6,1.7,1.8,2.0,2.1,2.2,2.3,2.5,2.6,2.7,2.8,2.9,2.31,2.32,2.85,2.91,2.92,2.93,2.94,2.95,3.0,3.01,3.1,3.2,3.02,3.3,3.6,3.7,3.15,3.16,3.021,3.022,3.31,3.32,3.33,3.34,3.51,3.52