PHP Blogging Apps Open to XML–RPC Exploits

Jul

PHP Blogging Apps Open to XML–RPC Exploits

Filed under: PHP / XML / PEAR

A bunch of popular PHP-based blogging and content management apps are vulnerable to a security hole in the PHP libraries handling XML-RPC, which could allow a server compromise. Affected apps include Wordpress, Drupal, PostNuke, Serendipity, phpAdsNew, phpWiki and many more. The presence of the security hole in a large number of programs is among the factors leading the Internet Storm Center to warn that the environment is ripe for a major Internet security event

Tags: No Tags