Comments on: BackUpWordPress Remote File Include Vulnerability

By: WordPress tuto a été hacké - Alerte sur BackupWordPress

WordPress tuto a été hacké - Alerte sur BackupWordPress — Mon, 05 Nov 2007 23:34:46 +0000

[...] soit le plugin BackupWordPress car je l’avais installé pour le tester et d’après ce message de BlogSecurity, il était vulnérable ce [...]

By: Remote file inclusion encontrado no plugin BackupWordPress | Security Hub - Segurança da informação

Mon, 05 Nov 2007 10:04:51 +0000

[...] Blog Security. Gostou deste post? Então assine o feed RSS! Nos meus feeds você não lê só a introdução, [...]

By: Truden

Truden — Sat, 03 Nov 2007 06:31:20 +0000

First time to see someone saying “Nice plugin, let sponsor it.”
Made my day :)

By: DK

DK — Fri, 02 Nov 2007 15:03:06 +0000

Donncha, check out http://blogsecurity.net/wordpress/article-210607/

These steps would have mitigated the risk of this attack :)

Alex, its a great plugin, but its new… perhaps we should get involved and sponser it.

By: alex

alex — Fri, 02 Nov 2007 14:54:13 +0000

I don’t like backup plugins because they often contain many security issues.

After a quick look, I found another security issue that allows the execution of SQL queries.

By: Donncha O Caoimh

Donncha O Caoimh — Fri, 02 Nov 2007 14:52:23 +0000

Saw a few of those queries on my blog this morning. Luckily I don’t run that script!

By: DK

DK — Fri, 02 Nov 2007 14:08:12 +0000

Phil, indeed, although our htaccess guide would have prevented this attack.

By: Philipp

Philipp — Fri, 02 Nov 2007 12:33:25 +0000

That’s awesome to see how fast attacker apply these new holes to their software…Not even as Security aware guy, you’re really safe from getting hit as you can’t react/check your plugins so often and fast…

By: BlogSecurity » Blog Archive » WordPress BlogWatch

BlogSecurity » Blog Archive » WordPress BlogWatch — Fri, 02 Nov 2007 12:30:35 +0000

[...] Remote File Inclusion (more) [...]

By: blogator.de » Blog Archive » Sicherheitslücke: BackUpWordPress

blogator.de » Blog Archive » Sicherheitslücke: BackUpWordPress — Fri, 02 Nov 2007 12:02:50 +0000

[...] gibt es eine Sicherheitslücke in BackUpWordPress und passend dazu einen Exploit (Nur für Tests verwenden). Eine gefixt Version [...]