Re: qualitevolaille.mu compromised

From: S Moonesamy <sm+mu_at_elandsys.com>
Date: Sun, 12 Apr 2015 00:22:25 -0700

Hi Ish,
At 11:27 11-04-2015, Ish Sookun wrote:
>Following the question[1] as put by a reader on my blog post
>regarding qualitevolaille.mu, the website could have most probably
>been compromised using a vulnerability in an un-patched CMS (Drupal
>in this case). Other security flaws could have contributed. However,
>I cannot elaborate without a proper analysis of the log files.

The web site was probably developed by an advertising agency. There
was a vulnerability in the database abstraction API of the CMS.

Regards,
S. Moonesamy
Received on Sun Apr 12 2015 - 07:22:52 PST