{"id":1940,"date":"2011-08-03T23:58:02","date_gmt":"2011-08-03T14:58:02","guid":{"rendered":"https:\/\/y2tech.net\/blog\/?p=1940"},"modified":"2011-10-17T23:07:06","modified_gmt":"2011-10-17T14:07:06","slug":"wordpress_security_probrems","status":"publish","type":"post","link":"https:\/\/y2tech.net\/blog\/inet\/wp\/wordpress_security_probrems-1940\/","title":{"rendered":"WordPress\u306e\u8106\u5f31\u6027\u554f\u984c"},"content":{"rendered":"

WordPress\u306e\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u30fc\u30db\u30fc\u30eb\u3092\u72d9\u3063\u305f\u30a2\u30af\u30bb\u30b9\u304c\u5897\u52a0\u4e2d<\/h3>\r\n
\r\n

\u3053\u306e\u30d6\u30ed\u30b0\u306eCMS\u30b7\u30b9\u30c6\u30e0\u3067\u3042\u308bWordpress\u306f\u4e16\u754c\u3067No.1\u30b7\u30a7\u30a2\u3092\u8a87\u308b\u6700\u3082\u4eba\u6c17\u306e\u3042\u308b\u30b7\u30b9\u30c6\u30e0\u3067\u3059\u304c\u3001\u30b7\u30a7\u30a2\u304c\u9ad8\u3044\u3053\u3068\u304b\u3089\u30b7\u30b9\u30c6\u30e0\u30af\u30e9\u30c3\u30ab\u30fc\u3084\u60aa\u5de7\u307f\u3092\u884c\u304a\u3046\u3068\u3057\u3066\u3044\u308b\u8f29\u304b\u3089\u306f\u683c\u597d\u306e\u30bf\u30fc\u30b2\u30c3\u30c8\u3068\u3057\u3066\u72d9\u308f\u308c\u3084\u3059\u3044\uff0e<\/p>\r\n
\r\n

WordPress\u306e\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u30fc\u30db\u30fc\u30eb\u306f\u983b\u7e41\u306b\u898b\u3064\u304b\u3063\u3066\u304a\u308a\u3001\u7e70\u308a\u8fd4\u3057\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u30fc\u30a2\u30c3\u30d7\u30c7\u30fc\u30c8\u304c\u884c\u308f\u308c\u3066\u3044\u308b\uff0eWordPress\u672c\u4f53\u306f\u983b\u7e41\u306b\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u30fc\u30a2\u30c3\u30d7\u30c7\u30fc\u30c8\u304c\u884c\u308f\u308c\u3066\u3044\u308b\u306e\u3067\u3001\u30b5\u30a4\u30c8\u306e\u7ba1\u7406\u8005\u306f\u3053\u307e\u3081\u306b\u30a2\u30c3\u30d7\u30c7\u30fc\u30c8\u3092\u884c\u3063\u3066\u3044\u308c\u3070\u30b5\u30a4\u30c8\u3092\u4e57\u3063\u53d6\u3089\u308c\u308b\u5371\u967a\u6027\u306f\u5c0f\u3055\u304f\u3067\u304d\u308b\u304c\u3001\u30b5\u30fc\u30c9\u30d1\u30fc\u30c6\u30a3\u30fc\u306e\u30d7\u30e9\u30b0\u30a4\u30f3\u3084\u30c6\u30fc\u30de\u306f\u3042\u307e\u308a\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u30fc\u30a2\u30c3\u30d7\u30c7\u30fc\u30c8\u304c\u884c\u308f\u308c\u3066\u3044\u306a\u3044\u306e\u304c\u5b9f\u60c5\u3060\u308d\u3046\uff0e<\/p>\r\n
\r\n

\u4eca\u65e5(8\/3)\u306eITMedia\u306e\u8a18\u4e8b \u300eWordPress\u306e\u30e6\u30fc\u30c6\u30a3\u30ea\u30c6\u30a3\u306b\u8106\u5f31\u6027\u3001\u30d6\u30ed\u30b0\u304c\u30cf\u30c3\u30ad\u30f3\u30b0\u3055\u308c\u308b\u6050\u308c<\/a>\u300f\u306b\u3082\u3042\u3063\u305f\u304c\u3001\u753b\u50cf\u30b5\u30a4\u30ba\u3092\u5909\u66f4\u3059\u308b\u30e6\u30fc\u30c6\u30a3\u30ea\u30c6\u30a3\u306ePHP\u30b3\u30fc\u30c9 “timthumb.php<\/a>” \u306b\u672a\u89e3\u6c7a\u306e\u8106\u5f31\u6027\u304c\u3042\u308a\u3001\u305d\u308c\u3092\u7a81\u3044\u305fWordPress\u30b7\u30b9\u30c6\u30e0\u306e\u4e57\u3063\u53d6\u308a\u304c\u983b\u767a\u3057\u3066\u3044\u308b\u3068\u8a00\u3046\uff0e<\/p>\r\n
\r\n

“timthumb.php” \u3092\u5229\u7528\u3057\u3066\u3044\u308b\u30d7\u30e9\u30b0\u30a4\u30f3\u3084\u30c6\u30fc\u30de\u306f\u6570\u591a\u304f\u3042\u308b\u3088\u3046\u306a\u306e\u3067\u3001WordPress\u3092\u4f7f\u3063\u3066\u3044\u308b\u4eba\u3067\u30b5\u30fc\u30c9\u30d1\u30fc\u30c6\u30a3\u30fc\u88fd\u306e\u30d7\u30e9\u30b0\u30a4\u30f3\u3084\u30c6\u30fc\u30de\u3092\u5229\u7528\u3057\u3066\u3044\u308b\u4eba\u306f\u4e00\u5ea6\u30c1\u30a7\u30c3\u30af\u3057\u3066\u304a\u304f\u3068\u826f\u3044\u3060\u308d\u3046\uff0e<\/p>\r\n
\r\n

\u3053\u306e\u30d6\u30ed\u30b0\u306e\u30b5\u30fc\u30d0\u306eHTTP\u306e\u30a2\u30af\u30bb\u30b9\u30a8\u30e9\u30fc\u306e\u30ed\u30b0\u3092\u898b\u3066\u3044\u305f\u3089\u3001\u6b21\u306e\u3088\u3046\u306a\u4e0d\u6b63\u30a2\u30af\u30bb\u30b9\u306e\u5f62\u8de1\u304c\u307f\u3089\u308c\u305f\uff0e\u3053\u306e\u30ed\u30b0\u3067\u306f\u72d9\u308f\u308c\u3066\u3044\u308b\u306e\u306f “timthumb.php” \u3067\u306f\u306a\u304f “phpThumb.php<\/a>” \u3068\u3044\u3046\u30d5\u30a1\u30a4\u30eb\u306e\u3088\u3046\u3060\u304c\u3001\u653b\u6483\u306e\u624b\u6cd5\u3068\u3057\u3066\u306f\u540c\u3058\u3088\u3046\u306a\u3082\u306e\u3060\u308d\u3046\uff0e<\/p>\r\n
\r\n

\u30a8\u30e9\u30fc\u30ed\u30b0\u306e\u5185\u5bb9\u304b\u3089\u3001”phpThumb.php” \u3092\u4f7f\u7528\u3057\u3066\u3044\u308b\u30d7\u30e9\u30b0\u30a4\u30f3\u3084\u30c6\u30fc\u30de\u306e\u540d\u524d\u3092\u62bd\u51fa\u3057\u3066\u307f\u305f\uff0e\r\n\r\n
\r\n

\u30d7\u30e9\u30b0\u30a4\u30f3\uff1a\u3000”wp-image-resizer”, “yet-another-photoblog”, “jh-portfolio”, \r\n
\r\n

\u3000\u3000\u3000\u3000\u3000\u3000”post-gallery”, “ferdinand-wordbook”, “autothumb”, “get-post-image”,\r\n
\r\n

\u3000\u3000\u3000\u3000\u3000\u3000”get-post-image”, “ungallery”, “magic-fields”, “verve-meta-boxes”\r\n
\r\n\u30c6\u30fc\u30de\uff1a\u3000\u3000 “eGallery”, “Comfy”, “redcarpet”, “Influx”, “mk3”, “Glow”\r\n
\r\n\u4e0a\u8a18\u306e\u30ea\u30b9\u30c8\u306f\u6975\u4e00\u90e8\u3060\u3068\u601d\u3046\u304c\u3001\u753b\u50cf\u306e\u30b5\u30e0\u30cd\u30a4\u30eb\u3092\u6271\u3046\u3088\u3046\u306a\u30d7\u30e9\u30b0\u30a4\u30f3\u3084\u30c6\u30fc\u30de\u3092\u4f7f\u7528\u3057\u3066\u3044\u308b\u5834\u5408\u306f\u3001\u4e00\u5ea6\u305d\u308c\u3089\u306e\u4e2d\u8eab\u306e\u30b3\u30fc\u30c9\u3092\u30c1\u30a7\u30c3\u30af\u3057\u3066\u304a\u3044\u305f\u65b9\u304c\u826f\u3044\u3060\u308d\u3046\uff0e\r\n
\r<\/p>\r\n

\r\n   \r\n[client 46.4.114.111] File does not exist: \/xxxxxxxx\/wp-content\/plugins\/wp-image-resizer\/thumb\/phpThumb.php\r\n[client 46.4.114.111] File does not exist: \/xxxxxxxx\/wp-content\/plugins\/yet-another-photoblog\/lib\/phpThumb-1.7.9\/phpThumb.php\r\n[client 46.4.114.111] File does not exist: \/xxxxxxxx\/wp-content\/plugins\/jh-portfolio\/phpThumb\/phpThumb.php\r\n[client 46.4.114.111] File does not exist: \/xxxxxxxx\/wp-content\/plugins\/post-gallery\/thirdparty\/phpthumb\/phpThumb.php\r\n[client 46.4.114.111] File does not exist: \/xxxxxxxx\/wp-content\/plugins\/ferdinand-wordbook\/phpthumb\/phpThumb.php\r\n[client 46.4.114.111] File does not exist: \/xxxxxxxx\/wp-content\/plugins\/autothumb\/phpthumb\/phpThumb.php\r\n[client 46.4.114.111] File does not exist: \/xxxxxxxx\/wp-content\/plugins\/get-post-image\/phpthumb\/phpThumb.php\r\n[client 46.4.114.111] File does not exist: \/xxxxxxxx\/wp-content\/plugins\/ungallery\/phpthumb\/phpThumb.php\r\n[client 46.4.114.111] File does not exist: \/xxxxxxxx\/wp-content\/plugins\/magic-fields\/thirdparty\/phpthumb\/phpThumb.php\r\n[client 46.4.114.111] File does not exist: \/xxxxxxxx\/wp-content\/themes\/eGallery\/phpThumb\/phpThumb.php\r\n[client 46.4.114.111] File does not exist: \/xxxxxxxx\/wp-content\/themes\/Comfy\/scripts\/phpThumb\/phpThumb.php\r\n[client 46.4.114.111] File does not exist: \/xxxxxxxx\/wp-content\/themes\/redcarpet\/scripts\/phpThumb\/phpThumb.php\r\n[client 46.4.114.111] File does not exist: \/xxxxxxxx\/wp-content\/themes\/Influx\/phpThumb\/phpThumb.php\r\n[client 46.4.114.111] File does not exist: \/xxxxxxxx\/wp-content\/themes\/mk3\/phpThumb\/phpThumb.php\r\n  \r\n
\r\n<\/code><\/pre>\r\n \u3000\r\n
\r\n
","protected":false},"excerpt":{"rendered":"\u4eca\u65e5(8\/3)\u306eITMedia\u306e\u8a18\u4e8b \u300eWordPress\u306e\u30e6\u30fc\u30c6\u30a3\u30ea\u30c6\u30a3\u306b\u8106\u5f31\u6027\u3001\u30d6\u30ed\u30b0\u304c\u30cf\u30c3\u30ad\u30f3\u30b0\u3055\u308c\u308b\u6050\u308c<\/a>\u300f\u306b\u3082\u3042\u3063\u305f\u304c\u3001\u753b\u50cf\u30b5\u30a4\u30ba\u3092\u5909\u66f4\u3059\u308b\u30e6\u30fc\u30c6\u30a3\u30ea\u30c6\u30a3\u306ePHP\u30b3\u30fc\u30c9 “timthumb.php” \u306b\u672a\u89e3\u6c7a\u306e\u8106\u5f31\u6027\u304c\u3042\u308a\u3001\u305d\u308c\u3092\u7a81\u3044\u305fWordPress\u30b7\u30b9\u30c6\u30e0\u306e\u4e57\u3063\u53d6\u308a\u304c\u983b\u767a\u3057\u3066\u3044\u308b\u3068\u8a00\u3046\uff0e","protected":false},"author":2,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"ngg_post_thumbnail":0,"footnotes":""},"categories":[12],"tags":[428,429,427,688,430,431],"class_list":["post-1940","post","type-post","status-publish","format-standard","hentry","category-wp","tag-phpthumb-php","tag-security-hole","tag-timthumb-php","tag-wp","tag-430","tag-431"],"_links":{"self":[{"href":"https:\/\/y2tech.net\/blog\/wp-json\/wp\/v2\/posts\/1940","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/y2tech.net\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/y2tech.net\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/y2tech.net\/blog\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/y2tech.net\/blog\/wp-json\/wp\/v2\/comments?post=1940"}],"version-history":[{"count":0,"href":"https:\/\/y2tech.net\/blog\/wp-json\/wp\/v2\/posts\/1940\/revisions"}],"wp:attachment":[{"href":"https:\/\/y2tech.net\/blog\/wp-json\/wp\/v2\/media?parent=1940"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/y2tech.net\/blog\/wp-json\/wp\/v2\/categories?post=1940"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/y2tech.net\/blog\/wp-json\/wp\/v2\/tags?post=1940"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}