[wp-hackers] Fwd: wp22xmlrpc-sql.txt

DD32 wordpress at dd32.id.au
Fri Jun 8 00:14:01 GMT 2007


untested by me, havnt seen it mentioned anywhere,
The table prefix is hard coded, and the affected function looks unchanged  
in 2.3

> Wordpress version 2.2 remote SQL injection exploit that makes use of  
> xmlrpc.php.
> _________________________________________________________________
>
> Article:
> * http://packetstormsecurity.org/0706-exploits/wp22xmlrpc-sql.txt
-- 
Using Opera's revolutionary e-mail client: http://www.opera.com/mail/


More information about the wp-hackers mailing list