UpHeron
All vulnerabilities

WordPress core

CVE-2007-0262

WordPress 2.0.6, and 2.1Alpha 3 (SVN:4662), does not properly verify that the m parameter value has the string data type, which allows remote attackers to obtain sensitive information via an invalid m[] parameter, as demonstrated by obtaining the path, and obtaining certain SQL information such as the table prefix.

Severity
High 7.8
Published
16 Jan 2007
Last changed
16 Jun 2026
Added to UpHeron
17 Oct 2026
Sources
NVD

Affected software

SoftwareAffected versions
WordPressWordPress core · cpe:a:wordpress:wordpress
  • Version 2.0.6
  • Version 2.1-alpha_3

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2007-0262
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2007-0262