Bugtraq mailing list archives

Re: HYSA-2006-005 WordPress 2.0.1 Remote DoS Exploit


From: scaturan () gmail com
Date: 9 Mar 2006 19:26:35 -0000

if you're using mod_security, try a variant of this ruleset:

SecFilterSelective "THE_REQUEST" "wp-register.php" "id:1004,deny,log,status:412"

#SecFilterRemove 1004 <- use this to remove the rule per virtual host, uncommented.


Current thread: