PHP XML-RPC Vulnerability
HomeLatest Entries
Knol is Live San Francisco Gets Its Network Back Abolishing Email? Amazon S3 Reliability Craigslist Phone VerificationLatest Entries in
Programming and Web Development
Amazon S3 Reliability
Why We Like to Write Frameworks
Programmer Competency Matrix
Reddit Goes Open-Source
Ding Dirk Bang Splat
PHP Blogging Apps Vulnerable to XML-RPC Exploits: This is very, very bad.
Many popular PHP-based blogging, wiki and content management programs can be exploited through a security hole in the way PHP programs handle XML commands. The flaw allows an attacker to compromise a web server, and is found in programs including PostNuke, WordPress, Drupal, Serendipity, phpAdsNew, phpWiki and phpMyFAQ, among others.
[…] By creating an XML file that uses single quotes to escape into the eval() call an attacker can easily execute php code on the target server.
Ouch.
Web Hosting
Web hosting, dedicated servers and Web design services
Laser Toner Cartridges UK
laser toner, toner cartridges, hp toner, lexmark toner, samsung toner, canon, toner, epson toner, oki toner, kyocera toner, xerox toner, remanufactured toner, compatible toner
Direct TV Deals
Free 4 room direct tv deals. no equipment to buy. free fast professional direct tv installation. this is the best direct tv deal available anywhere.
SEO Article
Learn from the experts with our SEO article.
rope light
Shopping with birddog distributing, inc., gives you access to the lowest prices, the best customer service and the quickest delivery times possible.
Comments
Actually, Wordpress is fine (see Matt)