Re: Sql Injection in wordpress 2.3.1

From: <shino_at_jenux.homelinux.org>
Date: 5 Dec 2007 19:27:09 -0000

('binary' encoding is not supported, stored as-is) Wordpress 2.3.1 converts the 'p' parameter to an integer.

query.php line 449:
$qv['p'] = (int) $qv['p'];

So there is no exploit possibility.
Received on Dec 05 2007