Posts Tagged ‘IIS’
Mass Infection via SQL Injection of IIS Websites
Multiple security outlets have released reports regarding a mass SQL injection attack that has compromised a large number of public websites – Google search results currently show that over 100,000 pages have been infected. This attack targets Microsoft IIS servers running both ASP and MSSQL. The automated injection routine appears to leverage a vulnerability in…