[WASC-WHID] WHID 2011-61: LizaMoon Mass SQL Injection Attack Points to Rogue AV Site

WASC Web Hacking Incidents Database wasc-whid at lists.webappsec.org
Mon Apr 25 09:13:12 EDT 2011


*Entry Title: *WHID 2011-61: LizaMoon Mass SQL Injection Attack Points to
Rogue AV Site
*WHID ID: *2011-61
*Date Occurred: *March 29, 2011
*Attack Method: *SQL Injection
*Application Weakness: *Improper Input Handling
*Outcome: *Planting of Malware
*Attacked Entity Field: *Multiple
*Attacked Entity Geography: *
*Incident Description: *Attackers have launched a large-scale SQL injection
attack that has compromised several thousand legitimate Websites, including
a few catalog pages from Apple's iTunes music store.
*Mass Attack: *Yes
*Mass Attack Name: *LizaMoon
*Reference: *
http://www.eweek.com/c/a/Security/LizaMoon-Mass-SQL-Injection-Attack-Points-to-Rogue-AV-Site-852537/
*Attack Source Geography:*
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.webappsec.org/pipermail/wasc-whid_lists.webappsec.org/attachments/20110425/5d2cb202/attachment-0003.html>


More information about the wasc-whid mailing list