| Widespread SQL Injection Attacks Compromising Websites |
|
US-CERT is aware of widespread SQL injection attacks compromising websites across all sectors. The compromised sites have been modified to include a reference to a malicious JavaScript file. When a user unknowingly visits a compromised site, they are silently re-directed to a series of malicious web pages that attempt to exploit multiple client-side vulnerabilities in a number of applications, including Internet Explorer and RealPlayer.
|