обычная история

[stas]

mozillazine:
The Mozilla Foundation's community marketing site Spread Firefox has been hacked. According to an announcement on Spread Firefox about the attack, it appears that the site was compromised in an attempt to use it to send spam.

KnowProSE.com:
I found out that there's a "new" drupal exploit which allows posters to inject arbitrary code into the system for execution on the server -by way of comments.

Drupal.org:
Drupal 4.6.2 also fixes two security vulnerabilities: one related to the use of Drupal's input filters and one in the XML-RPC library that Drupal ships with.

Arstechnica:
It is likely that exploit was facilitated by a recently discovered vulnerability in Drupal, the open source CMS utilized by SpreadFirefox and other community sites.

C|Net:
The exploited flaw was a vulnerability in PHP, the language in which Drupal, the content management system that Spread Firefox uses, is written.

Кто-то пишет кривой, код, кто-то забывает поставить агрейд - а виноват выходит PHP...

Comments

[ozlev.livejournal.com]

А ты как думал?
Не обвинять же Билла...