http://blogsecurity.net/wordpress/wordpress-upload-file-plugin-sql-injection Always something worth reading... Fri, 12 Mar 2010 11:09:45 +0000 http://wordpress.org/?v= hourly 1 http://blogsecurity.net/wordpress/wordpress-upload-file-plugin-sql-injection/comment-page-1#comment-11567 Nick Tue, 03 Jun 2008 09:53:49 +0000 http://blogsecurity.net/wordpress/wordpress-upload-file-plugin-sql-injection/#comment-11567 I tried to look for the plugin mentioned, but no joy, there's <a href="http://www.google.co.uk/search?q=site%3Ahttp%3A%2F%2Fsvn.wp-plugins.org%2F+wp-uploadfile" rel="nofollow">no reference to that file in the official plug-in svn</a> either. I tried to look for the plugin mentioned, but no joy, there’s no reference to that file in the official plug-in svn either.

]]> http://blogsecurity.net/wordpress/wordpress-upload-file-plugin-sql-injection/comment-page-1#comment-11549 Andrea_R Mon, 02 Jun 2008 17:27:18 +0000 http://blogsecurity.net/wordpress/wordpress-upload-file-plugin-sql-injection/#comment-11549 It appears to releate to a specific plugin, not wordpress itself. It appears to releate to a specific plugin, not wordpress itself.

]]> http://blogsecurity.net/wordpress/wordpress-upload-file-plugin-sql-injection/comment-page-1#comment-11548 DK Mon, 02 Jun 2008 16:00:24 +0000 http://blogsecurity.net/wordpress/wordpress-upload-file-plugin-sql-injection/#comment-11548 Nick, your not missing anything at all. I assume they mean the upload page under wp-admin, however, the advisory is very vague. Nick, your not missing anything at all. I assume they mean the upload page under wp-admin, however, the advisory is very vague.

]]> http://blogsecurity.net/wordpress/wordpress-upload-file-plugin-sql-injection/comment-page-1#comment-11547 Nick Mon, 02 Jun 2008 14:09:04 +0000 http://blogsecurity.net/wordpress/wordpress-upload-file-plugin-sql-injection/#comment-11547 Maybe I'm missing something, but wp-uploadfile.php doesn't appear to be a valid WP file? Maybe I’m missing something, but wp-uploadfile.php doesn’t appear to be a valid WP file?

]]>