Juniper Networks
Solutions
Products & Services
Company
Partners
Support
Education

Signature Detail

Security Intelligence Center
Signatures
Print

Short Name

HTTP:PHP:WP-GLOBAL-CONT-CE

Severity

Medium

Recommended

No

Category

HTTP

Keywords

WordPress Global Content Blocks Code Execution Attempt

Release Date

2012/07/22

Update Number

2163

Supported Platforms

idp-4.0+, isg-3.0+, j-series-9.5+, mx-9.4+, srx-9.2+, srx-branch-9.4+, vsrx-12.1+

HTTP: WordPress Global Content Blocks Code Execution Attempt


This signature detects attempts to exploit a known vulnerability against WordPress Global Content Blocks plugin. Successful exploitation of this vulnerability can lead to an arbitrary code execution within the context of the Web server.

Extended Description

Global Content Blocks is prone to multiple security vulnerabilities, including a remote PHP code-execution vulnerability and multiple information-disclosure vulnerability. Successful exploits of these issues may allow remote attackers to execute arbitrary malicious PHP code in the context of the application or obtain potentially sensitive information. Global Content Blocks 1.5.1 is vulnerable; other versions may also be affected.

Affected Products

  • WordPress Global Content Blocks 1.5.1

References

  • BugTraq: 54413
  • URL: http://www.wordpress.org/
  • URL: http://wordpress.org/extend/plugins/global-content-blocks/changelog/

Site Map
RSS Feeds
Careers
Accessibility
Feedback
Privacy Policy
Legal Notices
Copyright © 1999-2010 Juniper Networks, Inc. All rights reserved.
Help
|
My Account
|
Log Out