Signature Detail
Short Name |
HTTP:PHP:WORDPRESS-COOKIE-INJ |
|---|---|
Severity |
High |
Recommended |
No |
Recommended Action |
Drop |
Category |
HTTP |
Keywords |
WordPress Cookie Injection |
Release Date |
2005/08/31 |
Update Number |
1213 |
Supported Platforms |
di-5.3+, idp-4.0+, isg-3.0+, j-series-9.5+, mx-9.4+, srx-9.2+, srx-branch-9.4+, vsrx-12.1+ |
HTTP: WordPress Cookie Injection
This signature detects a command injection that affect the WordPress <= 1.5.1.3 application. This injection can lead to arbitrary remote command execution within the context of the web server. This vulnerability is actively being exploited and steps should be taken to install patches on affected machines.
Extended Description
Successful exploitation of this vulnerability may allow remote attackers to inject and execute arbitrary code on a victim server in the context of the host web site.
References
- CVE: CVE-2005-2612