scott.hodson.blog

I chose Wordpress as my weblog software of choice. Why? It’s free, it’s cross-platform (PHP and MySQL), easy to install (PHP) and seems to work pretty well. Just as I start using the software I read about a new book called Google Hacking for Penetration Testing and find on the author’s Google Hack DB on his website that hack #943 mentions SQL injection problems with Wordpress.

While I am assured that Wordpress 1.5 has fixed the SQL injection attacks mentioned in the hack database, this brings up a good point: Should people be writing books about how to exploit other people’s software?

While the book review mentions that the author holds back from giving details on how to perform serious attacks on critical information, I think the exposure of our software’s weaknesses can make us all more aware of vulnerabilities we all have with the software we build and run. I’m glad I was made aware of the situation with Wordpress, which apparently has been fixed. You might want to check the hack DB for any vulnerabilities with your software.