{"api_version":"1","generated_at":"2026-07-23T11:28:06+00:00","cve":"CVE-2007-0107","urls":{"html":"https://cve.report/CVE-2007-0107","api":"https://cve.report/api/cve/CVE-2007-0107.json","docs":"https://cve.report/api","cve_org":"https://www.cve.org/CVERecord?id=CVE-2007-0107","nvd":"https://nvd.nist.gov/vuln/detail/CVE-2007-0107"},"summary":{"title":"CVE-2007-0107","description":"WordPress before 2.0.6, when mbstring is enabled for PHP, decodes alternate character sets after escaping the SQL query, which allows remote attackers to bypass SQL injection protection schemes and execute arbitrary SQL commands via multibyte charsets, as demonstrated using UTF-7.","state":"PUBLISHED","assigner":"mitre","published_at":"2007-01-09 00:28:00","updated_at":"2026-04-23 00:35:47"},"problem_types":["NVD-CWE-Other","n/a"],"metrics":[{"version":"2.0","source":"nvd@nist.gov","type":"Primary","score":"6.8","severity":"","vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","data":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","baseScore":6.8,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"}}],"references":[{"url":"http://secunia.com/advisories/23741","name":"http://secunia.com/advisories/23741","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"Gentoo update for wordpress - Advisories - Secunia","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://secunia.com/advisories/23595","name":"http://secunia.com/advisories/23595","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"],"title":"Wordpress SQL Injection and Cross-Site Scripting Vulnerabilities - Advisories - Secunia","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://osvdb.org/31579","name":"http://osvdb.org/31579","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"","mime":"","httpstatus":"-1","archivestatus":"0"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/31297","name":"https://exchange.xforce.ibmcloud.com/vulnerabilities/31297","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"IBM X-Force Exchange","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.openpkg.com/security/advisories/OpenPKG-SA-2007.005.html","name":"http://www.openpkg.com/security/advisories/OpenPKG-SA-2007.005.html","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"],"title":"OpenPKG Corporation: Security: Security Advisories","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://wordpress.org/development/2007/01/wordpress-206/","name":"http://wordpress.org/development/2007/01/wordpress-206/","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"],"title":"News – WordPress 2.0.6 – WordPress.org","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://securityreason.com/securityalert/2112","name":"http://securityreason.com/securityalert/2112","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"SecurityReason - WordPress Trackback Charset Decoding SQL Injection Vulnerability","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.securityfocus.com/archive/1/456049/100/0/threaded","name":"http://www.securityfocus.com/archive/1/456049/100/0/threaded","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"SecurityFocus","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://security.gentoo.org/glsa/glsa-200701-10.xml","name":"http://security.gentoo.org/glsa/glsa-200701-10.xml","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"Gentoo Linux Documentation\n--\n  WordPress: Multiple vulnerabilities","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.vupen.com/english/advisories/2007/0061","name":"http://www.vupen.com/english/advisories/2007/0061","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"Webmail : Solution de messagerie professionnelle - OVHcloud- OVH","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.hardened-php.net/advisory_022007.141.html","name":"http://www.hardened-php.net/advisory_022007.141.html","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"],"title":"Hardened-PHP Project - PhP Security\n\n      - Advisory 02/2007","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.securityfocus.com/bid/21907","name":"http://www.securityfocus.com/bid/21907","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"],"title":"WordPress Charset Decoding SQL Injection Vulnerability","mime":"text/html","httpstatus":"200","archivestatus":"0"},{"url":"https://www.cve.org/CVERecord?id=CVE-2007-0107","name":"CVE Program record","refsource":"CVE.ORG","tags":["canonical"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2007-0107","name":"NVD vulnerability detail","refsource":"NVD","tags":["canonical","analysis"]}],"affected":[{"source":"CNA","vendor":"n/a","product":"n/a","version":"affected n/a","platforms":[]}],"timeline":[],"solutions":[],"workarounds":[],"exploits":[],"credits":[],"nvd_cpes":[{"cve_year":"2007","cve_id":"107","vulnerable":"1","versionEndIncluding":"2.0.5","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"wordpress","cpe5":"wordpress","cpe6":"*","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"}],"vendor_comments":[],"enrichments":{"kev":null,"epss":null,"legacy_qids":[]},"source_records":{"cve_program":{"containers":{"adp":[{"providerMetadata":{"dateUpdated":"2024-08-07T12:03:37.157Z","orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE"},"references":[{"name":"wordpress-mbstring-security-bypass(31297)","tags":["vdb-entry","x_refsource_XF","x_transferred"],"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/31297"},{"name":"21907","tags":["vdb-entry","x_refsource_BID","x_transferred"],"url":"http://www.securityfocus.com/bid/21907"},{"name":"23741","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"],"url":"http://secunia.com/advisories/23741"},{"name":"OpenPKG-SA-2007.005","tags":["vendor-advisory","x_refsource_OPENPKG","x_transferred"],"url":"http://www.openpkg.com/security/advisories/OpenPKG-SA-2007.005.html"},{"name":"GLSA-200701-10","tags":["vendor-advisory","x_refsource_GENTOO","x_transferred"],"url":"http://security.gentoo.org/glsa/glsa-200701-10.xml"},{"name":"31579","tags":["vdb-entry","x_refsource_OSVDB","x_transferred"],"url":"http://osvdb.org/31579"},{"tags":["x_refsource_CONFIRM","x_transferred"],"url":"http://wordpress.org/development/2007/01/wordpress-206/"},{"name":"23595","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"],"url":"http://secunia.com/advisories/23595"},{"name":"20070105 Advisory 02/2007: WordPress Trackback Charset Decoding SQL Injection Vulnerability","tags":["mailing-list","x_refsource_BUGTRAQ","x_transferred"],"url":"http://www.securityfocus.com/archive/1/456049/100/0/threaded"},{"name":"ADV-2007-0061","tags":["vdb-entry","x_refsource_VUPEN","x_transferred"],"url":"http://www.vupen.com/english/advisories/2007/0061"},{"tags":["x_refsource_MISC","x_transferred"],"url":"http://www.hardened-php.net/advisory_022007.141.html"},{"name":"2112","tags":["third-party-advisory","x_refsource_SREASON","x_transferred"],"url":"http://securityreason.com/securityalert/2112"}],"title":"CVE Program Container"}],"cna":{"affected":[{"product":"n/a","vendor":"n/a","versions":[{"status":"affected","version":"n/a"}]}],"datePublic":"2007-01-05T00:00:00.000Z","descriptions":[{"lang":"en","value":"WordPress before 2.0.6, when mbstring is enabled for PHP, decodes alternate character sets after escaping the SQL query, which allows remote attackers to bypass SQL injection protection schemes and execute arbitrary SQL commands via multibyte charsets, as demonstrated using UTF-7."}],"problemTypes":[{"descriptions":[{"description":"n/a","lang":"en","type":"text"}]}],"providerMetadata":{"dateUpdated":"2018-10-16T14:57:01.000Z","orgId":"8254265b-2729-46b6-b9e3-3dfca2d5bfca","shortName":"mitre"},"references":[{"name":"wordpress-mbstring-security-bypass(31297)","tags":["vdb-entry","x_refsource_XF"],"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/31297"},{"name":"21907","tags":["vdb-entry","x_refsource_BID"],"url":"http://www.securityfocus.com/bid/21907"},{"name":"23741","tags":["third-party-advisory","x_refsource_SECUNIA"],"url":"http://secunia.com/advisories/23741"},{"name":"OpenPKG-SA-2007.005","tags":["vendor-advisory","x_refsource_OPENPKG"],"url":"http://www.openpkg.com/security/advisories/OpenPKG-SA-2007.005.html"},{"name":"GLSA-200701-10","tags":["vendor-advisory","x_refsource_GENTOO"],"url":"http://security.gentoo.org/glsa/glsa-200701-10.xml"},{"name":"31579","tags":["vdb-entry","x_refsource_OSVDB"],"url":"http://osvdb.org/31579"},{"tags":["x_refsource_CONFIRM"],"url":"http://wordpress.org/development/2007/01/wordpress-206/"},{"name":"23595","tags":["third-party-advisory","x_refsource_SECUNIA"],"url":"http://secunia.com/advisories/23595"},{"name":"20070105 Advisory 02/2007: WordPress Trackback Charset Decoding SQL Injection Vulnerability","tags":["mailing-list","x_refsource_BUGTRAQ"],"url":"http://www.securityfocus.com/archive/1/456049/100/0/threaded"},{"name":"ADV-2007-0061","tags":["vdb-entry","x_refsource_VUPEN"],"url":"http://www.vupen.com/english/advisories/2007/0061"},{"tags":["x_refsource_MISC"],"url":"http://www.hardened-php.net/advisory_022007.141.html"},{"name":"2112","tags":["third-party-advisory","x_refsource_SREASON"],"url":"http://securityreason.com/securityalert/2112"}],"x_legacyV4Record":{"CVE_data_meta":{"ASSIGNER":"cve@mitre.org","ID":"CVE-2007-0107","STATE":"PUBLIC"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"n/a","version":{"version_data":[{"version_value":"n/a"}]}}]},"vendor_name":"n/a"}]}},"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"WordPress before 2.0.6, when mbstring is enabled for PHP, decodes alternate character sets after escaping the SQL query, which allows remote attackers to bypass SQL injection protection schemes and execute arbitrary SQL commands via multibyte charsets, as demonstrated using UTF-7."}]},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"n/a"}]}]},"references":{"reference_data":[{"name":"wordpress-mbstring-security-bypass(31297)","refsource":"XF","url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/31297"},{"name":"21907","refsource":"BID","url":"http://www.securityfocus.com/bid/21907"},{"name":"23741","refsource":"SECUNIA","url":"http://secunia.com/advisories/23741"},{"name":"OpenPKG-SA-2007.005","refsource":"OPENPKG","url":"http://www.openpkg.com/security/advisories/OpenPKG-SA-2007.005.html"},{"name":"GLSA-200701-10","refsource":"GENTOO","url":"http://security.gentoo.org/glsa/glsa-200701-10.xml"},{"name":"31579","refsource":"OSVDB","url":"http://osvdb.org/31579"},{"name":"http://wordpress.org/development/2007/01/wordpress-206/","refsource":"CONFIRM","url":"http://wordpress.org/development/2007/01/wordpress-206/"},{"name":"23595","refsource":"SECUNIA","url":"http://secunia.com/advisories/23595"},{"name":"20070105 Advisory 02/2007: WordPress Trackback Charset Decoding SQL Injection Vulnerability","refsource":"BUGTRAQ","url":"http://www.securityfocus.com/archive/1/456049/100/0/threaded"},{"name":"ADV-2007-0061","refsource":"VUPEN","url":"http://www.vupen.com/english/advisories/2007/0061"},{"name":"http://www.hardened-php.net/advisory_022007.141.html","refsource":"MISC","url":"http://www.hardened-php.net/advisory_022007.141.html"},{"name":"2112","refsource":"SREASON","url":"http://securityreason.com/securityalert/2112"}]}}}},"cveMetadata":{"assignerOrgId":"8254265b-2729-46b6-b9e3-3dfca2d5bfca","assignerShortName":"mitre","cveId":"CVE-2007-0107","datePublished":"2007-01-09T00:00:00.000Z","dateReserved":"2007-01-08T00:00:00.000Z","dateUpdated":"2024-08-07T12:03:37.157Z","state":"PUBLISHED"},"dataType":"CVE_RECORD","dataVersion":"5.1"},"nvd":{"publishedDate":"2007-01-09 00:28:00","lastModifiedDate":"2026-04-23 00:35:47","problem_types":["NVD-CWE-Other","n/a"],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","baseScore":6.8,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","versionEndIncluding":"2.0.5","matchCriteriaId":"A45515B8-1315-44D2-A6DD-4597E722EF43"}]}]}]},"legacy_mitre":{"record":{"CveYear":"2007","CveId":"107","Ordinal":"1","Title":"CVE-2007-0107","CVE":"CVE-2007-0107","Year":"2007"},"notes":[{"CveYear":"2007","CveId":"107","Ordinal":"1","NoteData":"WordPress before 2.0.6, when mbstring is enabled for PHP, decodes alternate character sets after escaping the SQL query, which allows remote attackers to bypass SQL injection protection schemes and execute arbitrary SQL commands via multibyte charsets, as demonstrated using UTF-7.","Type":"Description","Title":"CVE-2007-0107"},{"CveYear":"2007","CveId":"107","Ordinal":"2","NoteData":"2007-01-08","Type":"Other","Title":"Published"},{"CveYear":"2007","CveId":"107","Ordinal":"3","NoteData":"2018-10-16","Type":"Other","Title":"Modified"}]}}}