Search Module: Last X Searches Exploit
"St.Ego" <[email protected]>
| Newsgroups | gmane.comp.cms.xaraya.devel |
|---|---|
| Organization | Xaraya |
| Message-ID | <[email protected]> |
It has come to my attention that the Search module feature to show the last 10 searches has become the subject of automated submission, potentially to draw traffic and/or SEO rankings to other sites. The automated attack takes the form of submitting URLs to the search module so that they show up in the Last Searches, when displayed. The domain names so entered do not seem to be linked to correctly, just refreshing the page if clicked on, as they should, but that hasn't stopped them from being placed repeatedly. I recommend that everyone check your sites to verify if this feature is on and if it is being abused. Heads-up, FYI and all that... -St.Ego