WordPress 'wp-admin/options.php' Remote Code Execution Vulnerability

Bugtraq ID:	27633
Class:	Input Validation Error
CVE:	CVE-2008-5695
Remote:	Yes
Local:	No
Published:	Feb 05 2008 12:00AM
Updated:	Dec 31 2008 03:21PM
Credit:	Alexander Concha is credited with discovering this vulnerability.
Vulnerable:	WordPress WordPress MU 1.3.1 WordPress WordPress MU 1.3 WordPress WordPress MU 1.2.3 WordPress WordPress MU 1.2.2 WordPress WordPress 2.3.2 WordPress WordPress 2.3.1 WordPress WordPress 2.2.3 WordPress WordPress 2.2.2 WordPress WordPress 2.2.1 WordPress WordPress 2.2.1 WordPress WordPress 2.1.3 WordPress WordPress 2.1.3 WordPress WordPress 2.1.2 WordPress WordPress 2.1.1 WordPress WordPress 2.0.11 WordPress WordPress 2.0.10 WordPress WordPress 2.0.7 WordPress WordPress 2.0.6 WordPress WordPress 2.0.5 WordPress WordPress 2.0.4 WordPress WordPress 2.0.3 WordPress WordPress 2.0.2 WordPress WordPress 2.0.1 WordPress WordPress 2.0 WordPress WordPress 1.5.2 WordPress WordPress 1.5.1 .3 WordPress WordPress 1.5.1 .2 WordPress WordPress 1.5.1 WordPress WordPress 1.5 WordPress WordPress 1.3.1 WordPress WordPress 1.2.2 WordPress WordPress 1.2.1 + Gentoo Linux WordPress WordPress 1.2 + Gentoo Linux 1.4 + Gentoo Linux WordPress WordPress 2.3 WordPress WordPress 2.2 Revision 5003 WordPress WordPress 2.2 Revision 5002 WordPress WordPress 2.2 WordPress WordPress 2.1.3-RC2 WordPress WordPress 2.1.3-RC1 WordPress WordPress 2.1 WordPress WordPress 2.0.10-RC2 WordPress WordPress 2.0.10-RC1
Not Vulnerable:	WordPress WordPress MU 2.6

WordPress 'wp-admin/options.php' Remote Code Execution Vulnerability

Attackers may exploit this issue through a browser.

The following exploit code is available:

• /data/vulnerabilities/exploits/27633.php

WordPress 'wp-admin/options.php' Remote Code Execution Vulnerability

Solution:
The vendor released WordPress MU 1.3.2 to address this issue. Please see the references for more information.


WordPress WordPress MU 1.2.2

• WordPress latest.zip
  http://mu.wordpress.org/latest.zip

WordPress WordPress MU 1.2.3

• WordPress latest.zip
  http://mu.wordpress.org/latest.zip

WordPress WordPress MU 1.3

• WordPress latest.zip
  http://mu.wordpress.org/latest.zip

WordPress WordPress MU 1.3.1

• WordPress latest.zip
  http://mu.wordpress.org/latest.zip

WordPress 'wp-admin/options.php' Remote Code Execution Vulnerability

References:

• WordPress [MU] blog's options overwrite (Alexander Concha )
  
• Wordpress church_admin Plugin "id" Cross-Site Scripting Vulnerability (Sammy Forgit)