Other ColdFusion File Upload Attacks
We're continuing to see malware injection attacks against ColdFusion sites. The latest attack used the public upload in the popular Galleon software. Read the details here:
It appears to be the same user(s) as the ones that have attacked CFWebstore and FCKEditor installations, so they clearly are continuing to shift tactics in order to infect ColdFusion sites in new ways, and also change the file names they use to upload to sites, so be sure to check for *any* sites that have upload features that the hackers could make use of.
There are no comments for this entry.
[Add Comment]