high7.5Public exploit code
CVE-2005-2612
Direct code injection vulnerability in WordPress 1.5.1.3 and earlier allows remote attackers to execute arbitrary PHP code via the cache_lastpostdate[server] c…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- WordPress Core 1.5.1.3 - 'cache_lastpostdate' Arbitrary Code Execution (Metasploit)2010-07-03 · webapps · php · Verified
Impact
Direct code injection vulnerability in WordPress 1.5.1.3 and earlier allows remote attackers to execute arbitrary PHP code via the cache_lastpostdate[server] cookie.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Wordpress | Wordpress | Versions 1.0, 1.0.1, 1.0.2, 1.2, 1.5, 1.5.1 |