Comments on: New Wordpress 2.3.3 Exploit/Vulnerability – Adds Spam Directory /wp-content/1/ http://smackdown.blogsblogsblogs.com/2008/03/23/new-wordpress-233-exploitvulnerability-adds-spam-directory-wp-content1/ Smackdown! Mon, 15 Mar 2010 20:42:03 -0500 http://wordpress.org/?v=2.8.4 hourly 1 By: Nova vulnerabilitat a Wordpress 2.3.3 http://smackdown.blogsblogsblogs.com/2008/03/23/new-wordpress-233-exploitvulnerability-adds-spam-directory-wp-content1/comment-page-2/#comment-17890 Nova vulnerabilitat a Wordpress 2.3.3 Mon, 11 May 2009 20:07:40 +0000 http://smackdown.blogsblogsblogs.com/2008/03/23/new-wordpress-233-exploitvulnerability-adds-spam-directory-wp-content1/#comment-17890 [...] Hola! Si ets nou aquí, pot ser que vulguis subscriure't al feed RSS.S’ha descobert una nova vulnerabilitat que a Wordpress 2.3.3 que deixa el nostre blog vulnerable a atacs de injecció de codi; amb aquesta tècnica, els [...] [...] Hola! Si ets nou aquí, pot ser que vulguis subscriure’t al feed RSS.S’ha descobert una nova vulnerabilitat que a Wordpress 2.3.3 que deixa el nostre blog vulnerable a atacs de injecció de codi; amb aquesta tècnica, els [...]

]]> By: SEO Directory http://smackdown.blogsblogsblogs.com/2008/03/23/new-wordpress-233-exploitvulnerability-adds-spam-directory-wp-content1/comment-page-2/#comment-14213 SEO Directory Tue, 24 Mar 2009 13:48:40 +0000 http://smackdown.blogsblogsblogs.com/2008/03/23/new-wordpress-233-exploitvulnerability-adds-spam-directory-wp-content1/#comment-14213 Well the popular the software become more hacks you will see. I am happy i opt for wordpress. Was hacked just once that too because i didn't updated it for more than an year. We should look at Drupal. Everyweek there is some new vulnerablity patch. Well the popular the software become more hacks you will see. I am happy i opt for wordpress. Was hacked just once that too because i didn’t updated it for more than an year.

We should look at Drupal. Everyweek there is some new vulnerablity patch.

]]> By: Michael VanDeMar http://smackdown.blogsblogsblogs.com/2008/03/23/new-wordpress-233-exploitvulnerability-adds-spam-directory-wp-content1/comment-page-2/#comment-13817 Michael VanDeMar Tue, 17 Mar 2009 23:02:06 +0000 http://smackdown.blogsblogsblogs.com/2008/03/23/new-wordpress-233-exploitvulnerability-adds-spam-directory-wp-content1/#comment-13817 Actually WrathChylde, I am not sure what you are talking about. changing passwords would not cause the files to be deleted. Actually WrathChylde, I am not sure what you are talking about. changing passwords would not cause the files to be deleted.

]]> By: WrathChylde http://smackdown.blogsblogsblogs.com/2008/03/23/new-wordpress-233-exploitvulnerability-adds-spam-directory-wp-content1/comment-page-2/#comment-13816 WrathChylde Tue, 17 Mar 2009 22:04:50 +0000 http://smackdown.blogsblogsblogs.com/2008/03/23/new-wordpress-233-exploitvulnerability-adds-spam-directory-wp-content1/#comment-13816 Had the exact same problem on a 2.7.1 install. Turns out, it was a trojan virus on one of the laptops accessing wordpress. We changed the root, and user passwords, the files went away. Had the exact same problem on a 2.7.1 install. Turns out, it was a trojan virus on one of the laptops accessing wordpress.

We changed the root, and user passwords, the files went away.

]]> By: tiherp http://smackdown.blogsblogsblogs.com/2008/03/23/new-wordpress-233-exploitvulnerability-adds-spam-directory-wp-content1/comment-page-2/#comment-10850 tiherp Fri, 30 Jan 2009 07:51:37 +0000 http://smackdown.blogsblogsblogs.com/2008/03/23/new-wordpress-233-exploitvulnerability-adds-spam-directory-wp-content1/#comment-10850 May be due to the theme we used.......don't know why actually.......but the same thing happened to me too.....but managed at last.......may be this is due to the version. May be due to the theme we used…….don’t know why actually…….but the same thing happened to me too…..but managed at last…….may be this is due to the version.

]]> By: lenen http://smackdown.blogsblogsblogs.com/2008/03/23/new-wordpress-233-exploitvulnerability-adds-spam-directory-wp-content1/comment-page-2/#comment-10507 lenen Sun, 26 Oct 2008 22:27:33 +0000 http://smackdown.blogsblogsblogs.com/2008/03/23/new-wordpress-233-exploitvulnerability-adds-spam-directory-wp-content1/#comment-10507 How can Wordpress be so vulnerable? I don't get it. How can Wordpress be so vulnerable? I don’t get it.

]]> By: Michael VanDeMar http://smackdown.blogsblogsblogs.com/2008/03/23/new-wordpress-233-exploitvulnerability-adds-spam-directory-wp-content1/comment-page-2/#comment-10492 Michael VanDeMar Wed, 22 Oct 2008 16:08:38 +0000 http://smackdown.blogsblogsblogs.com/2008/03/23/new-wordpress-233-exploitvulnerability-adds-spam-directory-wp-content1/#comment-10492 fedmich, you can also simply turn indexing off altogether in that directory (or all of them) using .htaccess like so: Options -Indexes That's recursive, so it will apply to any directory under the directory you put it in, unless that directory overrides it using it's own .htaccess file. Note, though, that (and the one you suggested) just pertain to directory browsing. If a plugin has a specific file that could be looked for directly, it could still be detected. As to getting hacked on 2.5.1, yeah, I did as well. 2.5.2 was a security upgrade iirc. I just didn't blog about that one. It wasn't as widespread and I didn't have time when it happened. fedmich, you can also simply turn indexing off altogether in that directory (or all of them) using .htaccess like so:

Options -Indexes

That’s recursive, so it will apply to any directory under the directory you put it in, unless that directory overrides it using it’s own .htaccess file.

Note, though, that (and the one you suggested) just pertain to directory browsing. If a plugin has a specific file that could be looked for directly, it could still be detected.

As to getting hacked on 2.5.1, yeah, I did as well. 2.5.2 was a security upgrade iirc. I just didn’t blog about that one. It wasn’t as widespread and I didn’t have time when it happened.

]]> By: fedmich http://smackdown.blogsblogsblogs.com/2008/03/23/new-wordpress-233-exploitvulnerability-adds-spam-directory-wp-content1/comment-page-2/#comment-10489 fedmich Wed, 22 Oct 2008 15:43:48 +0000 http://smackdown.blogsblogsblogs.com/2008/03/23/new-wordpress-233-exploitvulnerability-adds-spam-directory-wp-content1/#comment-10489 1 of my website got attacked too. and its wp 2.5.1 anyway, guys make sure your wp-content has a file .htaccess and contains IndexIgnore */* so hackers wont be able to browse on your /wp-content/plugins/ and then check if your site can be hacked using some of your plugins. Thanks for the post Michael :) 1 of my website got attacked too. and its wp 2.5.1

anyway, guys make sure your wp-content has a file .htaccess
and contains
IndexIgnore */*
so hackers wont be able to browse on your /wp-content/plugins/ and then check if your site can be hacked using some of your plugins.

Thanks for the post Michael :)

]]> By: Eugen J http://smackdown.blogsblogsblogs.com/2008/03/23/new-wordpress-233-exploitvulnerability-adds-spam-directory-wp-content1/comment-page-2/#comment-6669 Eugen J Thu, 03 Jul 2008 15:48:38 +0000 http://smackdown.blogsblogsblogs.com/2008/03/23/new-wordpress-233-exploitvulnerability-adds-spam-directory-wp-content1/#comment-6669 If you got attacked, check http://www.bloggerguide.net/blog-platform/wordpress/wordpress-exploit-giving-backlinks-redirects-and-headaches-but-no-visitors/ too. Still working to see where the problem comes from and what tha attacker finds vulnerable. If you got attacked, check http://www.bloggerguide.net/bl.....-visitors/ too. Still working to see where the problem comes from and what tha attacker finds vulnerable.

]]> By: WordPress Vulnerability http://smackdown.blogsblogsblogs.com/2008/03/23/new-wordpress-233-exploitvulnerability-adds-spam-directory-wp-content1/comment-page-2/#comment-6421 WordPress Vulnerability Thu, 26 Jun 2008 10:22:08 +0000 http://smackdown.blogsblogsblogs.com/2008/03/23/new-wordpress-233-exploitvulnerability-adds-spam-directory-wp-content1/#comment-6421 [...] you see is a list of sites that were hacked through the latest WordPress Vulnerability that allows hackers to insert spam into your [...] [...] you see is a list of sites that were hacked through the latest WordPress Vulnerability that allows hackers to insert spam into your [...]

]]>