Make WordPress Core

Opened 14 years ago

Closed 14 years ago

#20436 closed defect (bug) (invalid)

SQL injection, deleted most of wp_options table

Reported by: kieran.c Owned by:
Priority: normal Milestone:
Component: Database Version: 3.3.1
Severity: critical Keywords:
Cc: Focuses:

Description (last modified by azaozz)

Don't know the specifics, but my site was hacked through SQL injection in the comment form. Most the wp_options table was deleted.

[edited]

Change History (5)

#1 @kieran.c
14 years ago

  • Component GeneralDatabase

#2 @azaozz
14 years ago

  • Description modified (diff)

#3 @azaozz
14 years ago

  • Description modified (diff)

#4 @azaozz
14 years ago

Usually it's not a good idea to post this type of reports on trac. If you suspect WordPress has a bug that would allow this, please email to security@… providing as much information as possible. If you have identified a bug, please include step-by-step description of how to reproduce it.

#5 @nacin
14 years ago

  • Milestone Awaiting Review
  • Resolutioninvalid
  • Status newclosed
Note: See TracTickets for help on using tickets.