Vulnerability ??

[rbuelund]

I have experinced that hackers try to do things like this on fabrik:

/details/14/390?format=pdf1111111111111%27%20UNION%20SELECT%20CHAR(45,120,49,45,81,45),CHAR(45,120,50,45,81,45),CHAR(45,120,51,45,81,45),CHAR(45,120,52,45,81,45),CHAR(45,120,53,45,81,45)--%20%20

details/14/390?format=pdf1111111111111%27%20UNION%20SELECT%20CHAR(45,120,49,45,81,45),CHAR(45,120,50,45,81,45)--%20%20

Is there some vulnerability in the pdf format, that one should be aware of. The IP is now blocked of the attempt is now blocked.

 

[cheesegrits]

That was fixed a while back, but it's still floating around out there in the various hacker kiddie lists of vulnerabilities.

So as long as you are running at least (I think) 3.7.1, you should be OK.

-- hugh