exploit cũ chưa Fix thì đã có exploit mới :v dạo này bận quá k có thời gian viết bài nên thôi thì cọp bi cách Fix lổ hổng Arbitrary-File Download trong Slider Revolution Responsive Plugins wordpress trước khi chờ đợi bài viết về lổ hổng này và cái LFI trong Shortcode plugin mới :v How to Fix SRR plugin Arbitrary-File Download Vuln? We recommend the following actions be taken: Update vulnerable Slider Revolution Responsive versions immediately after appropriate testing. Run all software as a non-privileged user with minimal access rights. Update or disable vulnerable Slider Revolution Responsive versions immediately after appropriate testing. Consider implementing a web application firewall and/or File Integrity Monitoring solution for greater risk management for web-based applications Perform regular web application and vulnerability scans of all public facing equipment. These scans should be performed, at a minimum, quarterly, but ideally on a monthly basis. Ensure that systems are hardened with industry-accepted guidelines. Keep all operating system, applications and essential software up to date to mitigate potential exploitation by attackers. Ai là admin các site wordpress tốt nhất nên tạm thời triệt ngay 2 plugins Slider Revolution Responsive và Shortcode nếu nó không cần thiết ;)
Posted on: Sat, 30 Aug 2014 07:23:16 +0000
Trending Topics
Recently Viewed Topics
© 2015