Santy.E Threatens Even Bigger Network of Sites
188236
Web users are just recovering from the recently discovered Santy worm, which defaced a large number of phpBB based bulletin boards.
24644
The Santy worm with variants continues spreading on the Internet taking advantage of search engines, including Google, AOL, Yahoo to identify exploitable Web pages.
633181
Gareth Heyes has a new post today talking about one of the vulnerable values in the $_SERVER superglobal - PHP_SELF.   I thought it might be a good idea to gather a few test cases demonstrating the problem. Why PHP allows these URL's is beyond me and it wouldn't take much work to filter out these malicious URL's in the PHP code.   He provides four test cases to show how simple it is to abuse - one using a HTTP header, another pushing XSS through, the third mentions search pages and the fourth a direct code injection.   You can download the code here.
395515
The Santy worm, which originally flared up a week ago as bulletin board Web sites found their pages erased and defaced by the worm&#39;s own text, has begun to spread using both Google and other search engines.
293673
Santy worm, which used Google to bring down bulletin board pages, now uses AOL and Yahoo search.
239180
User-generated Web content is becoming a target for hackers and cross-site scripting attacks on Web sites can lead to malware taking over the browsers of machines that use the sites.
499207
Take heart, Internet Explorer users. Now it appears that virtually every Internet browser program - not just yours - poses a security risk.
754394
Surfing the Web has never been more risky. Simply connecting to the Internet - and doing nothing else - exposes your PC to non-stop, automated break-in attempts by intruders looking to take control of your machine surreptitiously.
691931
Several major websites are brought down by the largest denial-of-service attacks ever staged. Compiled by Tony Long.
765105
Science & environment: The auction site has been the target of a hacker called Vladuz, whose actions are causing concern.
39193
Thousands of website bulletin boards have been defaced by a virus that used Google to spread across the net. The Santy worm first appeared on 20 December and within 24 hours had successfully hit more than 40,000 websites.
655235
Pune: Google Inc has announced that it has blocked Santy.A, the Web worm which had identified potential victims through its search and had spread among online bulletin boards using vulnerability in phpBB, an open-source software product managed by the
652193
CastleCops.com and similar good-guy sites are hard hit by distributed denial-of-service attacks.
104663
Worried about spyware? spam? "spim"? AOL wants to set your mind at rest. Also: Putting patches in place.
52789
The flaw exploited by the most recent versions of the worm such as Santy.C or Santy.E is more general than the original, and can occur anywhere a site designer has left the door open for the inclusion of arbitrary files into PHP scripts, reports IDG News
90728
A new variant of the Santy worm, which attacks Web pages usuing the PHP bulletin board software, appeared this week. Earlier variants used Google to find vulnerable Web pages; the new
198643
Responding to calls from antivirus firms, Google has taken steps to stop the spread of an Internet worm called Santy worm. The santy worm was first spotted early Tuesday morning and was using Googleâs search