Patch your wordpress engine pls, because there is critical SQL injection hole on Wordpress reported to bugtraq ,after that i just do some Pen-test with my modify "exploit" (base on the script at the adv), i get so many md5-hash password, and i feel so happy (ups) because what i tell at Undip seminar was right , almost all the administrator username is "admin" , offcourse blogsome already patch the engine and the_day blogs are already patched too :)
Go patch your system before someone did a nasty thing , sorry i cant patch your engine for u thiz time :(
No comments:
Post a Comment