Full Disclosure mailing list archives
Presidential Candidates' Websites Vulnerable
From: "Marek Isalski" <Marek.Isalski () smuht nwest nhs uk>
Date: Thu, 01 Jul 2004 10:12:50 +0100
For those who didn't catch it on The Inquirer already, it sounds like not even the would-be presidents of the US can afford decent security: http://www.theinquirer.net/?article=16939 "site shows signs of being vulnerable to SQL injection errors" and "packed with cross-site scripting errors"... Has Donnie been doing overtime? :) Most amusing comment given the still raging Win/Linux debate on this list: "Kerry has open source credentials - he is using Apache running on Red Hat. Bush's OS of choice is none other than Vole's IIS 5.0 server." Most worrying comment: both sites use visitor trackers (something I always feel is a sign that the site's owners feel that invasion of privacy is less important than commercial success). Maybe one day we'll just do away with elections and go by the Google PageRank of the candidates' websites? Marek _______________________________________________ Full-Disclosure - We believe in it. Charter: http://lists.netsys.com/full-disclosure-charter.html
Current thread:
- Presidential Candidates' Websites Vulnerable Marek Isalski (Jul 01)
- <Possible follow-ups>
- RE: Presidential Candidates' Websites Vulnerable Clairmont, Jan M (Jul 01)
- RE: Presidential Candidates' Websites Vulnerable Harlan Carvey (Jul 01)
- Re: Presidential Candidates' Websites Vulnerable Jordan Klein (Jul 01)
- Re: Presidential Candidates' Websites Vulnerable Frank Knobbe (Jul 01)
- Re: Presidential Candidates' Websites Vulnerable Barry Fitzgerald (Jul 01)
- Re: Presidential Candidates' Websites Vulnerable Kurt Seifried (Jul 01)
- Re: Presidential Candidates' Websites Vulnerable Ron DuFresne (Jul 01)
- Re: Presidential Candidates' Websites Vulnerable Nasir Ghaznavi (Jul 02)
- Re: Presidential Candidates' Websites Vulnerable Daniel Veditz (Jul 02)