Click to See Complete Forum and Search --> : PHP XML-RPC Vulnerability


planetsim
07-05-2005, 11:04 AM
Its a couple of days old but I know most dont read tech stuff too much so I think its not a bad idea if I inform people.

Its suggested that you upgrade XML-RPC which is a good idea however most of this can be avoided with simple checking which is pure laziness from the programmer.

Affected apps include Wordpress, Drupal, PostNuke, Serendipity, phpAdsNew, phpWiki and many more

NetCraft (http://news.netcraft.com/archives/2005/07/04/php_blogging_apps_vulnerable_to_xmlrpc_exploits.html) has a small article on the matter

goldbug
07-05-2005, 11:32 AM
pear upgrade XML_RPC

Simple as that.