HostCow - Web Hosting South Africa

Web Hosting South Africa

SKYPE: hostcow or Ticket Support	Domain Search:

6Scan Sees Surge of Malicious Attempts During WordPress Attack.
Google Apps Recovers Minor Outage Impacting Gmail, Google Drive.
DDoS Defacement Attacks Targeting ISPs on the Rise.

Please Login or Register

Your vulnerable WordPress sites are safe

19/05/2012 17:29

Hackers are already exploiting this vulnerability and there are thousands of websites being hacked.

Yes. All requests made in order to exploit this vulnerability are denied with a "Precondition Failed" error message.

Mass infection of WordPress sites due to TimThumb

Recently a new high risk vulnerability was discovered in the highly popular TimThumb script. TimThumb is a “A small php script for cropping, zooming and resizing web images (jpg, png, gif). Perfect for use on blogs and other applications.“

TimThumb is included in a lot of WordPress plugins and themes (free and paid). Exploiting this vulnerability an attacker can upload and excute a PHP file of his choice on a vulnerable website.