[wp-hackers] FW: WordPress Search Function SQL-Injection

[Lloyd Budd]

On 2/27/07, steve caturan <scaturan at negimaki.com> wrote:
> yep, i was able to reproduce the error on 2.1.1 but not 2.0.9

This issue should already be resolved in SVN (for in development
WordPress 2.1.2)
http://trac.wordpress.org/ticket/3722

I am naive in these things, but hopefully no true injection is
possible (if it is, don't share it on the  mailing list please).

Thank you,
Lloyd