Ah...I gotcha. So they Google for the unique text they posted (on your site)
and if they find it, they know that form is vulnerable?

Not only are they sneaky bastards, but they're lazy as well?

<!----------------//------
andy matthews
web developer
certified advanced coldfusion programmer
ICGLink, Inc.
[EMAIL PROTECTED]
615.370.1530 x737
--------------//--------->

-----Original Message-----
From: Bobby Hartsfield [mailto:[EMAIL PROTECTED]
Sent: Thursday, August 10, 2006 4:55 PM
To: CF-Talk
Subject: RE: OT - "Nice site I will recommend you to all my friends."


Once they’ve ran it for a while, they’ll give it a week or so and search
Google for the text. If they find it, that means their method of posting it
worked and the site is exactly what they are looking for. (vulnerable)

...:.:.:.:.:.:.:.:.:.:.:.:.
Bobby Hartsfield
http://acoderslife.com





-----Original Message-----
From: Andy Matthews [mailto:[EMAIL PROTECTED]
Sent: Thursday, August 10, 2006 10:44 AM
To: CF-Talk
Subject: RE: OT - "Nice site I will recommend you to all my friends."

What would they be waiting for?

<!----------------//------
andy matthews
web developer
certified advanced coldfusion programmer
ICGLink, Inc.
[EMAIL PROTECTED]
615.370.1530 x737
--------------//--------->

-----Original Message-----
From: Tom Chiverton [mailto:[EMAIL PROTECTED]
Sent: Thursday, August 10, 2006 9:30 AM
To: CF-Talk
Subject: Re: OT - "Nice site I will recommend you to all my friends."


On Thursday 10 August 2006 14:52, Les Mizzell wrote:
> "Nice site I will recommend you to all my friends."

<guess>
It's a test to find vulnerable sites without bothering to wait for a POST of
a
form to come back - just submit the request and check back at some future
point.

--
Tom Chiverton

****************************************************

This email is sent for and on behalf of Halliwells LLP.

Halliwells LLP is a limited liability partnership registered in England and
Wales under registered number OC307980 whose registered office address is at
St James's Court Brown Street Manchester M2 2JF.  A list of members is
available for inspection at the registered office. Any reference to a
partner in relation to Halliwells LLP means a member of Halliwells LLP.
Regulated by the Law Society.

CONFIDENTIALITY

This email is intended only for the use of the addressee named above and may
be confidential or legally privileged.  If you are not the addressee you
must not read it and must not use any information contained in nor copy it
nor inform any person other than Halliwells LLP or the addressee of its
existence or contents.  If you have received this email in error please
delete it and notify Halliwells LLP IT Department on 0870 365 8008.

For more information about Halliwells LLP visit www.halliwells.com.








~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~|
Introducing the Fusion Authority Quarterly Update. 80 pages of hard-hitting,
up-to-date ColdFusion information by your peers, delivered to your door four 
times a year.
http://www.fusionauthority.com/quarterly

Archive: 
http://www.houseoffusion.com/groups/CF-Talk/message.cfm/messageid:249549
Subscription: http://www.houseoffusion.com/groups/CF-Talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4

Reply via email to