CVE:CVE-2008-0205
CNNVD:CNNVD-200801-140
Math Comment Spam Protection 2.1以及WordPress plugin之前版本下的math-comment-spam-protection.php中存在多个跨站请求伪造漏洞。远程攻击者通过(1)mcsp_opt_msg_no_answer或者(2)wp-admin/options-general.php的mcsp_opt_msg_wrong_answer参数以管理员身份进行操作。
solution:Upgrade wordpress math_comment_spam_protection_plugin to a higher version than 2.1,and avoid the version (,2.1]