CVE:CVE-2011-5254
CNNVD:CNNVD-201112-496
WordPress是WordPress软件基金会的一套使用PHP语言开发的博客平台。该平台支持在PHP和MySQL的服务器上架设个人博客网站。
WordPress中的Connections插件0.7.1.6之前版本中存在未明安全漏洞。攻击者利用该漏洞产生未知影响和攻击向量。
solution:Upgrade connections_project connections to a higher version than 0.7.1.5,0.2.3,0.2.4,0.2.7,0.2.8,0.2.9,0.2.10,0.2.11,0.2.22,0.2.23,0.2.24,0.3.2,0.3.3,0.4.0,0.5.0,0.5.1,0.5.47,0.5.48,0.6.1,0.6.2,0.6.2.1,0.7.0.0,0.7.0.1,0.7.0.2,0.7.0.3,0.7.0.4,0.7.1.1,0.7.1.2,0.7.1.3,0.7.1.4,and avoid the version (,0.7.1.5],0.2.3,0.2.4,0.2.7,0.2.8,0.2.9,0.2.10,0.2.11,0.2.22,0.2.23,0.2.24,0.3.2,0.3.3,0.4.0,0.5.0,0.5.1,0.5.47,0.5.48,0.6.1,0.6.2,0.6.2.1,0.7.0.0,0.7.0.1,0.7.0.2,0.7.0.3,0.7.0.4,0.7.1.1,0.7.1.2,0.7.1.3,0.7.1.4