Quote:
Originally Posted by eraserhead
I don't really understand what that page is about but i know heinisblog is from Galadril, he made the currently used webstats part of this plugin.
|
The page is stating that a 0-day vulnerability (A previously unknown vulnerability, i.e. it has not been patched) has been found in a webapp made by Heinosblog and that said webapps can be found by googling intext:"Powered by Heinisblog". The vulnerability is an SQL injection, which means it is done by injecting a piece of code into an unprotected string. Let me give an example courtesy of Wikipedia (With additional explanations/modifications by me):
Suppose we have a table called userinfo. On a profile page, we have a query into this table that asks for all info regarding a specific user. This query could look like this:
Code:
SELECT * FROM userinfo WHERE id=$userid
where $userid is the variable part of the query, which could be fetched from the address line (Such as
http://example.com/user.php?id=1337)
If this value is not protected in some way, a malicious user can insert whatever he likes as the id. Suppose he chooses to insert "1;DROP TABLE users;" (Without quotes) as the id. This gives us the query (Actually two queries, but that's not important):
Code:
SELECT * FROM userinfo WHERE id=1;DROP TABLE userinfo;
The first part fetches the user information as it is originally intended. The semicolon is used to mark the ending of a query, however, and the next query is much more malicious; it deletes the entire userinfo table.
As such, SQL exploits can be nasty. I am not saying that there is one in the web interface (A quick glance at it showed that the author has covered the most common pitfalls), but it is worth taking a backup of your data now and then.
7:09: SourceMod error session started
Linear Mode
