mirror of
https://github.com/0xMarcio/cve.git
synced 2026-05-22 22:19:39 +02:00
0xMarcio
726 B
726 B
CVE-2009-2852
Description
WP-Syntax plugin 0.9.1 and earlier for Wordpress, with register_globals enabled, allows remote attackers to execute arbitrary PHP code via the test_filter[wp_head] array parameter to test/index.php, which is used in a call to the call_user_func_array function.
POC
Reference
No PoCs from references.