Debian/wordpress: unknown

WordPress before 2.0.6, when mbstring is enabled for PHP, decodes alternate character sets after escaping the SQL query, which allows remote attackers to bypass SQL injection protection schemes and ex

Action: Upgrade wordpress to 2.0.6-1 or later.

Affected

Fixed versions

Sources

• osv: DEBIAN-CVE-2007-0107
• https://security-tracker.debian.org/tracker/CVE-2007-0107

published 2007-01-09T00:28:00Z · modified 2026-10-21T17:47:48.701902891Z · JSON