|
Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com |
Re: WordPress Search Function SQL-Injection
kelson
pobox.com
Date: Tue Feb 27 2007 - 16:23:32 CST
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]
This looks like the bug described here: http://trac.wordpress.org/ticket/3722
"DB error when sanitized search string results in empty query" (Filed January 31)
According to that page:
> I guess it's also worth mentioning that commas
> _are_ being sanitized. The reason for the error is
> that once the commas are gone WordPress attempts
> to wrap the search query with "AND ( $search )"
>
> Since $search is null MySQL throws up an error.
The same error results from searching for just a space. In either case, adding other characters to the field results in the expected query. It doesn't look like injection would be possible.
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]