| Microsoft Defaced, again! |
|
|
|
| Wednesday, 27 June 2007 | |||||
|
At the time being, the defacement is still up and running even though not every browser will be capable to show it as too many users are trying now to load the hacker's injected CSS (Cascading Style Sheet) located on an external host (h.1asphhost.com) which now has is suffering slow response time. By analyzing the HTML source code of the defaced page we can see some "extra" HTML code: "<link xhref=http://h.1asphost.com/remoter/css.css type=text/css rel=stylesheet>".
The technique used by the attacker to deface Microsoft's page is probably based on a kind of SQL flaw (sql injection). In fact, after a short investigation we noticed how the V2 parameter passed to the PreRegister.aspx script, allows to execute both Cross Site Scripting attacks (www.microsoft.co.uk/events/net/PreRegister.aspx?eventID=p8399&v2="><script>alert(/XSS/)</script>) as well as SQL injection attacks, as you can deduct from the debug error message generated by the application.
-- NEWS UPDATE --
The attacker has issued a video which shows some proof of concepts related to SQL Injection flaws affecting http://www.microsoft.co.uk/.
Powered by a Zone-H(ified) version of AkoComment 3.0! DISCLAIMER: Forum postings are the opinion of the posting author alone, and should not be taken as the opinion of Zone-h. The author is entirely and solely responsible for all content that he/she uploads, posts, or otherwise transmits via the website. Zone-h is not responsible for such content. However, Zone-h shall have the right, but not the obligation, to delete, move, or edit any content that violates this agreement or is otherwise objectionable as determined by Zone-h in its sole discretion and without notice. |
|||||
Very little time has passed from the 
| < Prev | Next > |
|---|
