![]() |
![]() |
![]() |
![]() |
![]() |
Information about your favorite browser: news, articles and more.
70,000 Web pages hacked by database attack
Published January 9th, 2008 in Browser Security, Malware
Web sites that naively call for user input, then fail to put strict checks on what that input may be, are susceptible to SQL injection attacks. That vulnerability appears to be the cause of up to 70,000 Web pages getting hacked by malicious code between Dec. 28 and Jan. 5..
The intrusions represent a whole new level of threat to users on the Internet. Instead of the attack seeking to launch a virus or worm at individual computers, it invaded Web databases and used them to host its malicious code and distribute it every time site visitors sought information beyond a home page or product page from the database. But for the fact it used an old and already guarded against Windows exploit, it might still be spreading across the Internet, security experts said. 70,000 Web pages hacked by database attack - Security - www.itnews.com.au








