Description
WordPress是一种使用PHP语言开发的博客平台，用户可以在支持PHP和MySQL数据库的服务器上架设自己的网志
WordPress 'wp-admin/users.php'脚本不正确过滤's'参数的数据，允许远程攻击者利用漏洞提交类似http://site/wp-admin/users.php?s=http://的请求，获取敏感路径信息
0
WordPress 2.7.x
WordPress 2.8.x
WordPress 2.9.x
WordPress 3.0.x
WordPress 3.1.x
WordPress 3.2.x
WordPress 3.3.x
WordPress 3.4.x
WordPress 3.5
厂商解决方案
目前没有详细解决方案提供：
http://wordpress.org/
{"href": "https://www.seebug.org/vuldb/ssvid-60904", "status": "poc,details", "bulletinFamily": "exploit", "modified": "2013-07-17T00:00:00", "title": "WordPress /wp-admin/users.php\u7578\u5f62s\u53c2\u6570\u8def\u5f84\u6cc4\u6f0f\u6f0f\u6d1e", "cvss": {"vector": "NONE", "score": 0.0}, "sourceHref": "", "cvelist": [], "description": "WordPress\u662f\u4e00\u79cd\u4f7f\u7528PHP\u8bed\u8a00\u5f00\u53d1\u7684\u535a\u5ba2\u5e73\u53f0\uff0c\u7528\u6237\u53ef\u4ee5\u5728\u652f\u6301PHP\u548cMySQL\u6570\u636e\u5e93\u7684\u670d\u52a1\u5668\u4e0a\u67b6\u8bbe\u81ea\u5df1\u7684\u7f51\u5fd7\r\n\r\nWordPress 'wp-admin/users.php'\u811a\u672c\u4e0d\u6b63\u786e\u8fc7\u6ee4's'\u53c2\u6570\u7684\u6570\u636e\uff0c\u5141\u8bb8\u8fdc\u7a0b\u653b\u51fb\u8005\u5229\u7528\u6f0f\u6d1e\u63d0\u4ea4\u7c7b\u4f3chttp://site/wp-admin/users.php?s=http://\u7684\u8bf7\u6c42\uff0c\u83b7\u53d6\u654f\u611f\u8def\u5f84\u4fe1\u606f\r\n0\r\nWordPress 2.7.x\r\nWordPress 2.8.x\r\nWordPress 2.9.x\r\nWordPress 3.0.x\r\nWordPress 3.1.x\r\nWordPress 3.2.x\r\nWordPress 3.3.x\r\nWordPress 3.4.x\r\nWordPress 3.5\r\n\u5382\u5546\u89e3\u51b3\u65b9\u6848\r\n\r\n\u76ee\u524d\u6ca1\u6709\u8be6\u7ec6\u89e3\u51b3\u65b9\u6848\u63d0\u4f9b\uff1a\r\nhttp://wordpress.org/", "viewCount": 7, "published": "2013-07-17T00:00:00", "sourceData": "", "id": "SSV:60904", "enchantments_done": [], "type": "seebug", "lastseen": "2017-11-19T17:41:11", "reporter": "Root", "enchantments": {"score": {"value": -0.4, "vector": "NONE"}, "dependencies": {}, "backreferences": {}, "exploitation": null, "vulnersScore": -0.4}, "references": [], "immutableFields": [], "cvss2": {}, "cvss3": {}, "_state": {"dependencies": 1645458488}}
{}
WordPress /wp-admin/users.php畸形s参数路径泄漏漏洞