ICT Security-Sécurité PC et Internet

Each quarter, FireHost reports on the Superfecta – a group of four cyberattacks that are the most dangerous – and warns that both Cross-Site Scripting and SQL Injection attacks have become even more prevalent since the third quarter of 2012.

The four attack types which make up the Superfecta, and which pose the most serious threat to the private information hosted in your database are Cross-site Scripting (XSS), Directory Traversal, SQL Injection, and Cross-site Request Forgery (CSRF).

This bulletin was written by Vigil@nce : http://vigilance.fr/offer SYNTHESIS OF THE VULNERABILITY An attacker can use two Cross Site Scripting (...)...

SYNTHESIS OF THE VULNERABILITY

An attacker can use two Cross Site Scripting of phpMyAdmin, in order to execute JavaScript code in the context of the web site.

Severity: 2/4
Creation date: 15/09/2011

IMPACTED PRODUCTS

Fedora
TYPO3
Unix - plateform

Security researchers have found an XSS vulnerability in WordPress 3.3, but it only affects installations put in via an IP address rather than a domain.