wordpress Archives - geschonneck.com

WordPress 2.1.1 with backdoor

Posted onFriday, 2. March 2007Friday, 2. March 20071 Comment

WordPress security warning! “If you downloaded WordPress 2.1.1 from wordpress.org within the past 3-4 days, your files may include a security exploit that was added by a cracker, and you should upgrade all of your files to 2.1.2 immediately”. Please check

SQL Injection in WordPress 2.1.1

Posted onThursday, 1. March 2007Thursday, 1. March 20072 Comments

Upgrading to wordpress 2.1.1 was urgent, but we still have SQL injections, path disclosures and cross site scripting problems in this version! My colleague Sebastian Krause has some examples: