WebApp Sec mailing list archives

Re: 404 messages pointing to a strange location


From: Simon <sunsetpicture () gmail com>
Date: Sat, 03 Jan 2009 20:27:36 +0100

Hi Tom,

That link is interesting. The Exhibit Engine (a photo album web tool) is mentioned there; I actually don't use it, but I've got an album there created with JAlbum, and the pages contain links to the Exhibit Engine.

I guess that was the reason why the server has been scanned?

thanks
Simon

Tom Ritter wrote:
Based on some googling, and finding similar vulnerabilities [1], it
seems likely someone was just running a very wide vulnerability scan
against your server.  If you use any pre-built applications like phpBB
or osCommerce, you should make sure they are up-to-date.

-tom

[1] http://secunia.com/advisories/cve_reference/CVE-2006-7183/

-------------------------------------------------------------------------
Sponsored by: Watchfire Methodologies & Tools for Web Application Security Assessment With the rapid rise in the number and types of security threats, web application security assessments should be considered a crucial phase in the development of any web application. What methodology should be followed? What tools can accelerate the assessment process? Download this Whitepaper today!
https://www.watchfire.com/securearea/whitepapers.aspx?id=70170000000940F
-------------------------------------------------------------------------



-------------------------------------------------------------------------
Sponsored by: Watchfire Methodologies & Tools for Web Application Security Assessment With the rapid rise in the number and types of security threats, web application security assessments should be considered a crucial phase in the development of any web application. What methodology should be followed? What tools can accelerate the assessment process? Download this Whitepaper today!
https://www.watchfire.com/securearea/whitepapers.aspx?id=70170000000940F
-------------------------------------------------------------------------


Current thread: