Exploitation Summary
EIP tracks 1 public exploit for CVE-2007-2821. PoCs published by waraxe.
AI-analyzed exploit summary This exploit targets a SQL injection vulnerability in WordPress 2.1.3's admin-ajax.php, using blind SQL injection techniques to extract user password hashes via timing attacks. It leverages BENCHMARK delays to infer character values.
Description
SQL injection vulnerability in wp-admin/admin-ajax.php in WordPress before 2.2 allows remote attackers to execute arbitrary SQL commands via the cookie parameter.
Exploits (1)
This exploit targets a SQL injection vulnerability in WordPress 2.1.3's admin-ajax.php, using blind SQL injection techniques to extract user password hashes via timing attacks. It leverages BENCHMARK delays to infer character values.