mirror of
https://github.com/gosticks/wordpress-develop.git
synced 2026-07-27 12:30:17 +00:00
e89562de1312983fa5b23415caa958c2b050c73a
"b2 0.6.2 and prior" allow sql injection in ./blog.header.php. $posts isn�t convert to integer, so we can inject a sql in this variable. In MySQL 4.x UNION and subselects can be used to obtain privileges. git-svn-id: https://develop.svn.wordpress.org/trunk@153 602fd350-edb4-49c9-b593-d223f7449a82
Description
Languages
PHP
80.5%
CSS
9.4%
JavaScript
8.5%
SCSS
0.9%
HTML
0.7%