PHP Remote File Inclusion Vulnerability in FireStats Plugin for WordPress
CVE-2009-2143

Currently unrated

Key Information:

Vendor
Wordpress
Status
Firestats
Vendor
CVE Published:
22 June 2009

Summary

The FireStats plugin for WordPress has a vulnerability in the firestats-wordpress.php file that enables remote file inclusion. This flaw allows attackers to inject and execute arbitrary PHP code through the manipulation of the fs_javascript parameter. Users of versions prior to 1.6.2-stable are particularly at risk, as this defect could lead to significant security breaches if exploited.

References

http://firestats.cc/wiki/ChangeLog#a1.6.2-stable13062009
x_refsource_CONFIRM
http://secunia.com/advisories/35400
third-party-advisoryx_refsource_SECUNIA
https://www.exploit-db.com/exploits/8945
exploitx_refsource_EXPLOIT-DB

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.