CVE:CVE-2007-1897
CNNVD:CNNVD-200704-107
WordPress的xmlrpc (xmlrpc.php)中存在SQL注入漏洞。远程认证用户可以借助XML RPC mt.setPostCategories方式呼叫中的字符串参数值，执行任意的SQL指令。
solution:Upgrade wordpress wordpress to a higher version than 2.1.2,2.1,2.1.1,and avoid the version (,2.1.2],2.1,2.1.1