CVE-2008-0682

Wordpress Wordspew < 3.71 - SQL Injection

Title source: rule

Description

SQL injection vulnerability in wordspew-rss.php in the Wordspew plugin before 3.72 for Wordpress allows remote attackers to execute arbitrary SQL commands via the id parameter.

Exploits (1)

exploitdb WORKING POC VERIFIED

by S@BUN · textwebappsphp

https://www.exploit-db.com/exploits/5039

View Code ZIP pw:eip

References (4)

[Various Sources] http://pierre.sudarovich.free.fr/index.php/2006/02/28/ajax-shoutbox/

[Vendor Advisory] http://secunia.com/advisories/28767

[Third Party Advisory, VDB Entry] http://www.securityfocus.com/bid/27583

[Exploit, Third Party Advisory] https://www.exploit-db.com/exploits/5039

Scores

EPSS 0.0074

EPSS Percentile 72.6%

Classification

CWE

CWE-89

Status draft

Affected Products (39)

wordpress/wordspew < 3.71

wordpress/wordspew

... and 24 more

Timeline

Published Feb 12, 2008

Tracked Since Feb 18, 2026