Exploitation Summary
EIP tracks 2 public exploits for CVE-2005-2612.
PoCs published by Metasploit, including Metasploit module exploits/unix/webapp/wp_lastpost_exec.
AI-analyzed exploit summary This Metasploit module exploits a PHP code execution flaw in WordPress (CVE-2005-2612) by leveraging the 'register_globals' setting to inject malicious payloads via crafted cookie data. It targets versions prior to 1.5.1.3.
Description
Direct code injection vulnerability in WordPress 1.5.1.3 and earlier allows remote attackers to execute arbitrary PHP code via the cache_lastpostdate[server] cookie.
Exploits (2)
This Metasploit module exploits a PHP code execution flaw in WordPress (CVE-2005-2612) by leveraging the 'register_globals' setting to inject malicious payloads via crafted cookie data. It targets versions prior to 1.5.1.3.
This Metasploit module exploits a PHP code execution vulnerability in WordPress versions prior to 1.5.1.3 by leveraging the 'register_globals' setting. It constructs a malicious cookie payload to trigger arbitrary code execution via a chain of WordPress filter functions.