Comments on: Serious SQL Injection Vulnerability http://www.redcardinal.ie/security/28-04-2008/serious-sql-injection-vulnerability/ Search Engine Optimisation Ireland Tue, 06 Dec 2011 20:35:07 +0000 hourly 1 http://wordpress.org/?v=3.1.3 By: Seologiahttp://www.redcardinal.ie/security/28-04-2008/serious-sql-injection-vulnerability/#comment-2371 Seologia Thu, 05 Jun 2008 15:49:06 +0000 http://www.redcardinal.ie/?p=559#comment-2371 SQL Injection is a serious problem and is happening more than one would think. Take Wordpress, for instance. One of the last versions had a injection vulnerability. The problem is that if you update, something else breaks! :S Sometimes it's just better to stick with the bad but working rather than the new and "unknown". SQL Injection is a serious problem and is happening more than one would think. Take WordPress, for instance. One of the last versions had a injection vulnerability. The problem is that if you update, something else breaks! :S Sometimes it’s just better to stick with the bad but working rather than the new and “unknown”.

]]> By: paulhttp://www.redcardinal.ie/security/28-04-2008/serious-sql-injection-vulnerability/#comment-2369 paul Tue, 06 May 2008 13:14:01 +0000 http://www.redcardinal.ie/?p=559#comment-2369 btw just got a 500 server error when submitting that last comment, but it went through. I know you had problems before with your wordpress setup. I'm using FF.2.0.0.14 on WinNT. btw just got a 500 server error when submitting that last comment, but it went through. I know you had problems before with your wordpress setup. I’m using FF.2.0.0.14 on WinNT.

]]> By: paulhttp://www.redcardinal.ie/security/28-04-2008/serious-sql-injection-vulnerability/#comment-2365 paul Tue, 06 May 2008 13:11:45 +0000 http://www.redcardinal.ie/?p=559#comment-2365 I'm suspecting that most developers didn't admit that it was a problem with their code and probably charged them to update their website to protect it :) = p I’m suspecting that most developers didn’t admit that it was a problem with their code and probably charged them to update their website to protect it :)
= p

]]> By: Richard Hearnehttp://www.redcardinal.ie/security/28-04-2008/serious-sql-injection-vulnerability/#comment-2366 Richard Hearne Tue, 06 May 2008 12:47:34 +0000 http://www.redcardinal.ie/?p=559#comment-2366 The most interesting piece to this puzzle is that SQL injections can only really be defended against in the site code. I wonder what some of the developers behind the Irish sites hit told their clients?Rgds to both Richard The most interesting piece to this puzzle is that SQL injections can only really be defended against in the site code. I wonder what some of the developers behind the Irish sites hit told their clients?

Rgds to both
Richard

]]> By: paulhttp://www.redcardinal.ie/security/28-04-2008/serious-sql-injection-vulnerability/#comment-2370 paul Tue, 06 May 2008 10:56:38 +0000 http://www.redcardinal.ie/?p=559#comment-2370 The number is down to just over 2,000 pages indexed with that search query. I know it's not a 100% reliable measure. But after just over a week it does seem to be that more and more companies are patching their servers.= Paul The number is down to just over 2,000 pages indexed with that search query. I know it’s not a 100% reliable measure. But after just over a week it does seem to be that more and more companies are patching their servers.

= Paul

]]> By: Donncha O Caoimhhttp://www.redcardinal.ie/security/28-04-2008/serious-sql-injection-vulnerability/#comment-2368 Donncha O Caoimh Mon, 05 May 2008 14:22:48 +0000 http://www.redcardinal.ie/?p=559#comment-2368 Ouch! That is nasty but it looks like many of the sites have patched the hole, at least the ones I check on the front page of that Google search have. Ouch! That is nasty but it looks like many of the sites have patched the hole, at least the ones I check on the front page of that Google search have.

]]> By: Damien Mulley » Blog Archive » Fluffy Links - Tuesday April 29th 2008http://www.redcardinal.ie/security/28-04-2008/serious-sql-injection-vulnerability/#comment-2367 Damien Mulley » Blog Archive » Fluffy Links - Tuesday April 29th 2008 Tue, 29 Apr 2008 04:47:41 +0000 http://www.redcardinal.ie/?p=559#comment-2367 [...] Via Richard Hearne. A lot of sites are being hacked with the SQL injection exploit. List of Irish ones. [...] [...] Via Richard Hearne. A lot of sites are being hacked with the SQL injection exploit. List of Irish ones. [...]

]]>