WordPress Username Remote PHP Code Injection Vulnerability
BID:18372
CVE-2006-2667 |Info
WordPress Username Remote PHP Code Injection Vulnerability
| Bugtraq ID: | 18372 |
| Class: | Input Validation Error |
| CVE: |
CVE-2006-2667 |
| Remote: | Yes |
| Local: | No |
| Published: | Jun 12 2006 12:00AM |
| Updated: | Jun 12 2006 09:06PM |
| Credit: | rgod is credited with the discovery of this vulnerability. |
| Vulnerable: |
WordPress Wordpress (B2) 0.6.2 .1 WordPress Wordpress (B2) 0.6.2 WordPress WordPress 2.0.2 WordPress WordPress 2.0.1 WordPress WordPress 2.0 WordPress WordPress 1.5.2 WordPress WordPress 1.5.1 .3 WordPress WordPress 1.5.1 .2 WordPress WordPress 1.5.1 WordPress WordPress 1.5 WordPress WordPress 1.2.2 WordPress WordPress 1.2.1 WordPress WordPress 1.2 WordPress WordPress 0.71 WordPress WordPress 0.7 Gentoo Linux |
| Not Vulnerable: |
WordPress WordPress 2.0.3 |
Discussion
WordPress Username Remote PHP Code Injection Vulnerability
WordPress is prone to a remote PHP code-injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input.
An attacker can exploit this issue to facilitate a compromise of the application and the underlying system; other attacks are also possible.
For a successful exploit of this issue, the MySQL password used in the application must be either blank or trivial to guess.
WordPress is prone to a remote PHP code-injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input.
An attacker can exploit this issue to facilitate a compromise of the application and the underlying system; other attacks are also possible.
For a successful exploit of this issue, the MySQL password used in the application must be either blank or trivial to guess.
Exploit / POC
WordPress Username Remote PHP Code Injection Vulnerability
This issue can be exploited through a web client.
The following exploit is available:
This issue can be exploited through a web client.
The following exploit is available:
Solution / Fix
WordPress Username Remote PHP Code Injection Vulnerability
Solution:
The vendor has released version 2.0.3 to address this issue.
Please see the referenced vendor advisories for more information.
WordPress Wordpress (B2) 0.6.2 .1
WordPress Wordpress (B2) 0.6.2
WordPress WordPress 0.7
WordPress WordPress 0.71
WordPress WordPress 1.2
WordPress WordPress 1.2.1
WordPress WordPress 1.2.2
WordPress WordPress 1.5
WordPress WordPress 1.5.1
WordPress WordPress 1.5.1 .3
WordPress WordPress 1.5.1 .2
WordPress WordPress 1.5.2
WordPress WordPress 2.0
WordPress WordPress 2.0.1
WordPress WordPress 2.0.2
Solution:
The vendor has released version 2.0.3 to address this issue.
Please see the referenced vendor advisories for more information.
WordPress Wordpress (B2) 0.6.2 .1
-
WordPress WordPress Latest Release Download
http://wordpress.org/latest.tar.gz
WordPress Wordpress (B2) 0.6.2
-
WordPress WordPress Latest Release Download
http://wordpress.org/latest.tar.gz
WordPress WordPress 0.7
-
WordPress WordPress Latest Release Download
http://wordpress.org/latest.tar.gz
WordPress WordPress 0.71
-
WordPress WordPress Latest Release Download
http://wordpress.org/latest.tar.gz
WordPress WordPress 1.2
-
WordPress WordPress Latest Release Download
http://wordpress.org/latest.tar.gz
WordPress WordPress 1.2.1
-
WordPress WordPress Latest Release Download
http://wordpress.org/latest.tar.gz
WordPress WordPress 1.2.2
-
WordPress WordPress Latest Release Download
http://wordpress.org/latest.tar.gz
WordPress WordPress 1.5
-
WordPress WordPress Latest Release Download
http://wordpress.org/latest.tar.gz
WordPress WordPress 1.5.1
-
WordPress WordPress Latest Release Download
http://wordpress.org/latest.tar.gz
WordPress WordPress 1.5.1 .3
-
WordPress WordPress Latest Release Download
http://wordpress.org/latest.tar.gz
WordPress WordPress 1.5.1 .2
-
WordPress WordPress Latest Release Download
http://wordpress.org/latest.tar.gz
WordPress WordPress 1.5.2
-
WordPress WordPress Latest Release Download
http://wordpress.org/latest.tar.gz
WordPress WordPress 2.0
-
WordPress WordPress Latest Release Download
http://wordpress.org/latest.tar.gz
WordPress WordPress 2.0.1
-
WordPress WordPress Latest Release Download
http://wordpress.org/latest.tar.gz
WordPress WordPress 2.0.2
-
WordPress WordPress Latest Release Download
http://wordpress.org/latest.tar.gz
References
WordPress Username Remote PHP Code Injection Vulnerability
References:
References:
- Wordpress <=2.0.2 'cache' shell injection (rgod)
- WordPress 2.0.3 (WordPress)
- WordPress Homepage (WordPress)