US-CERT Computer Emergency Readiness Team Websites Compromised Through SQL Injection Websites Compromised Through SQL Injection |
|
US-CERT has seen reports of an attack that has compromised a large number of legitimate websites. The reports indicate that attackers are modifying the sites and embedding a reference to JavaScript code. Users who visit one of these infected websites may unknowingly execute malicious code. This code attempts to exploit known vulnerabilities for which patches are available but may not have been applied to the victim's system.
|
