Merry Christmas, now go patch your Wordpress installation (seclists.org) 1 points by zx2c4 13y ago ↗ HN
[–] zx2c4 13y ago ↗ Exploit: http://git.zx2c4.com/w3-total-fail/tree/w3-total-fail.shScreencast: http://git.zx2c4.com/w3-total-fail/plain/screencast.ogv
[–] groobque 13y ago ↗ I can confirm the issue. My install was vulnerable. If you don't want to disable W3, then just add deny from all In wp-content/w3tc/dbcache/.htaccess.
2 comments
[ 3.5 ms ] story [ 22.6 ms ] threadScreencast: http://git.zx2c4.com/w3-total-fail/plain/screencast.ogv