For all you bloggers out there on Wordpress, be careful ! If youre still using version 1.5 and prior , then you may be at risk.
A vulnerability was identified in WordPress, which may be exploited by remote attackers to execute arbitrary SQL commands. This flaw is due to an input validation error in the "template-functions-category.php" script that does not properly filter the "cat_ID" parameter, which may be exploited by remote users to conduct SQL injection attacks.Solution ?
Upgrade to the newest version of Wordpress version 1.5.1.2
0 Comments:
Post a Comment
<< Home