Security researcher Behrouz Sadeghipour has identified several SQL Injection vulnerabilities in a Hong Kong subdomain of Yahoo. He reported his findings to the company and all the security holes have been fixed. According to the expert, the flaws have been found in various files on the Hong Kong promotions subdomain (hk.promotions.yahoo.com). He decided to analyze this subdomain because it contains a lot of Flash files and PHP scripts that could be vulnerable, and it doesnt appear th…
Comments are closed.
