WordPress Hacked Malware

Friday, September 10th, 2010 at 10:31 pm

Security and content management systems

Content Management Systems or CMS facilitates the creation and design of Web sites. The beauty of using a CMS their website is that even if you do not know how to write a single line of HTML code, you can create professional-looking Web pages. With a CMS, you can change Easily design your site without affecting the content too, so it is much easier to apply the changes to the entire site.

Management Systems content also allow collaborative design and maintenance Web site, giving users several different levels of access to Web pages can change depending necessary.

CMS Security Flaws
The problem with most CMS is that it is dotted with the security vulnerabilities that can lead to serious problems using it. Many hackers have been targeting these vulnerabilities in open source CMS as WordPress, PostNuke, Drupal and phpBB. Most try to gain unauthorized access to your system to create botnets denial of service attack or identity theft fraud.

A hacking incident involving AMD, a leading global manufacturer of chips, illustrates the point. In 2006, AMD's customer service and support forums were cut. The authors used the forum to distribute malware. Distributing malware is not the only something which hackers can access them but you can use your high-speed network for their purposes.

Yet another CMS has the same problems. WordPress, undoubtedly the best known and widely used content management system has time and again fallen prey to security vulnerabilities. In 2009, the company Secunia security reported security flaws found in these systems WordPress:

* Access System
* Privilege Escalation
* Denial of Service
* Cross-Site Scripting
* Security Bypass

The good news is that people WordPress.org proactively looking for these vulnerabilities and patch them. But the fact that these security holes keep popping up even a new version of WordPress out highlights an important thing to remember when using CMS: you can not really vendors and suppliers to reach a CMS content management platform completely safe and secure. Moreover, some providers do not even bother to get the patches for known vulnerabilities cover!

Stay safe with a Web application firewall

A Web application firewall can help keep you safe from the attacks that are possible with these security holes, better than network firewalls and other detection systems can. Moreover, a Web site application firewall could be used even with ownership of CMS platforms, it is not necessary to change some of the source code CMS to use.

Web application firewall can examine all data packets in place and blocks malicious scripts, viruses and hacking attempts.

About the Author

Information Security Consultant

Security Now 306: Your Questions, Steve's Answers #120