Wordpress 2.2.1 extremely vulnerabe to XSS - Warning
 

If you are running wordpress 2.2.1, everybody could inject links, post, delete stuff, this exploit basically gives full admin rights !

http://mybeni.rootzilla.de/mybeNi/20...rst_blog_worm/

Pay attention to "7.", that's what you have to worry about, the attack needs no authentication at all and your blog can be hijacked in a minute.

thanks for the heads up

Thank you.

Thanks man!

Good heads up.. Thanks!

B-

nice info!. thanks

I have not found any machines yet that this #7 exploit works on.

Did you install the "worm" he created to fix your broken blogs?