CVE-2005-1810
EPSS 1.6%Published: 6/1/2005Modified: 5/27/2026
Description
SQL injection vulnerability in template-functions-category.php in WordPress 1.5.1 allows remote attackers to execute arbitrary SQL commands via the $cat_ID variable, as demonstrated using the cat parameter to index.php.
Affected packages (1)
- Debian/wordpressfrom 0, < 1.5.1.2-1