Secunia

Inj3ct0r has discovered a vulnerability in the WP-Syntax plugin for WordPress, which can be exploited by malicious people to compromise a vulnerable system.

Input passed via the "test_filter[]" parameter to wp-syntax/test/index.php is not properly sanitised before being used in a call to "call_user_func_array()", which can be exploited to inject and execute arbitrary PHP code.

Successful exploitation requires that "register_globals" is enabled.

The vulnerability is confirmed in version 0.9.8. Other versions may also be affected.

Solution
Update to version 0.9.10 or later.

Provided and/or discovered by
Inj3ct0r

Changelog
Further details available in Customer Area

Original Advisory
WP-Syntax:
http://wordpress.org/extend/plugins/wp-syntax/changelog/
http://plugins.trac.wordpress.org/changeset/395779/wp-syntax/trunk/test/index.php?old=103121&old_path=wp-syntax%2Ftrunk%2Ftest%2Findex.php

milw0rm:
http://milw0rm.com/exploits/9431

Deep Links
Links available in Customer Area