CVE-2007-1897

WordPress < 2.1.2 - Authenticated SQL Injection via XML-RPC mt.setPostCategories Method

Title source: llm
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for CVE-2007-1897. PoCs published by Sumit Siddharth.

AI-analyzed exploit summary This Perl script exploits a SQL injection vulnerability in WordPress 2.1.2 via the XML-RPC interface. It extracts user credentials, hashes, and system information by injecting malicious SQL queries into the 'mt.setPostCategories' method.

Description

SQL injection vulnerability in xmlrpc (xmlrpc.php) in WordPress 2.1.2, and probably earlier, allows remote authenticated users to execute arbitrary SQL commands via a string parameter value in an XML RPC mt.setPostCategories method call, related to the post_id variable.

Exploits (1)

exploitdb WORKING POC VERIFIED
by Sumit Siddharth · perlwebappsphp
https://www.exploit-db.com/exploits/3656

This Perl script exploits a SQL injection vulnerability in WordPress 2.1.2 via the XML-RPC interface. It extracts user credentials, hashes, and system information by injecting malicious SQL queries into the 'mt.setPostCategories' method.

Classification
Working Poc 95%
Attack Type
Sqli
Complexity
Moderate
Reliability
Reliable
Target: WordPress 2.1.2
Auth required
Prerequisites: Valid WordPress user credentials (contributor role or higher) · Valid post ID the user can edit · XML-RPC interface enabled
devstral-2 · analyzed Feb 16, 2026 Full analysis →

References (8)

Core 8
Core References
Vendor Advisory vdb-entry x_refsource_vupen
http://www.vupen.com/english/advisories/2007/1245
Vendor Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/25108
Product x_refsource_confirm
http://trac.wordpress.org/ticket/4091
Exploit, Third Party Advisory exploit x_refsource_exploit-db
https://www.exploit-db.com/exploits/3656
Patch, Vendor Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/24751
Exploit, Vendor Advisory vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/23294
Third Party Advisory vendor-advisory x_refsource_debian
http://www.debian.org/security/2007/dsa-1285

Scores

EPSS 0.0717
EPSS Percentile 93.5%

Details

CWE
CWE-89
Status published
Products (3)
wordpress/wordpress 2.1
wordpress/wordpress 2.1.1
wordpress/wordpress < 2.1.2
Published Apr 09, 2007
Tracked Since Feb 18, 2026