Microsoft Defaced Again! Security at it’s best..NOT!

Posted by Abbas ||

July 3, 2007 ||

1,422 views || Share This Post

(No Ratings Yet)

Loading ...

Rate this article:

Another edition to Microsoft’s never ending problems which manage to keep the company in the limelight for all the wrong reasons. Last week Zone-H reported another attack on Microsoft properties, this time it was Microsoft.co.uk. Hackers managed to deface the site and put up a picture of a kid waving Saudi Arabian flag.

This is what Zone-H had to say about the attack " The technique used by the attacker to deface Microsoft’s page is probably based on a kind of SQL flaw (sql injection)." and…. "Most probably, the attacker exploited the site by means of SQL injection to insert the HTML code "<link xhref=http://h.1asphost.com/remoter/css.css _fcksavedurl="http://h.1asphost.com/remoter/css.css" type=text/css rel=stylesheet>" in a field belonging to the table which gets read every time a new page is generated."