Why is website vulnerability dangerous?

[subornaakter20]

In practice, in most cases the cause of problems is the acceptance of poorly verified data (entered by the user) by the web resource. Thus, any incorrect and dangerous commands end up being inserted into the interpreted code.

There are also more complex situations, such as the so-called clipboard overflow (when someone pushes too much material into the clipboard without making sure that there is enough space for it).

Some vulnerabilities exist only in theory, but loadrunner protocol list most of them (there are even special exploits for them) represent a real problem.


First, you no longer have full control over your own resource. And this is a serious problem. The content you publish may now be such that search engines will blacklist you. In addition, your administration rights (passwords, logins) end up in the hands of hackers, who may ask for a ransom to return your ability to manage your own site.

Second, attackers gain access to user databases. And it's not so bad if these are logins, passwords or the contents of letters. But if payment data falls into the wrong hands, this is a serious problem.

Third, the resource can be used as a source for sending letters with a code that is dangerous for recipients and causes serious failures in the PC. To make sure that the recipient opens such a letter, it offers, for example, an interesting vacancy, a message about a large win, a reminder about an old government fine that was allegedly not paid on time, etc.

Fourth, fraudsters place phishing (fake) pages on the hacked object, imitating real ones (existing on social networks, at banking organizations or in e-commerce). When getting to such a page and trying to make some kind of payment, the user, without suspecting anything, leaves his financial data, which immediately ends up at the disposal of fraudsters.

Read also!

"Website Visitor Counters: Simple Tools with Big Possibilities"
Read more
Another danger that website vulnerability entails is the ability to infect other web sites using malicious scripts embedded on hacked web resources. They can also be used by bots as an intermediate server to organize powerful DDoS attacks.

It is also worth mentioning the possibility of placing a so-called redirect on a hacked site, that is, a code that automatically directs the visitor to other pages where a paid subscription is offered.