« previous next »
Pages: [1]   Go Down

Author Topic: Malware on website with WordPress and jQuery issues.  (Read 1331 times)

0 Members and 1 Guest are viewing this topic.

Offline polonus

  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 34052
  • malware fighter
Malware on website with WordPress and jQuery issues.
« on: March 03, 2016, 06:23:06 PM »
Google Safe Browse reports Possible infection with malware: http://killmalware.com/meaganlucy.com/#
WordPress issue: Warning User Enumeration is possible  :o
The first two user ID's were tested to determine if user enumeration is possible.

ID   User           Login
1   trs-admin   trs-admin
2   michael   michael

-http://meaganlucy.com
Detected libraries:
jquery-migrate - 1.2.1 : -http://meaganlucy.com/wp-includes/js/jquery/jquery-migrate.min.js?ver=1.2.1
Info: Severity: medium
http://bugs.jquery.com/ticket/11290
http://research.insecurelabs.org/jquery/test/
jquery - 1.11.3 : (active1)-http://meaganlucy.com/wp-includes/js/jquery/jquery.js?ver=1.11.3
(active) - the library was also found to be active by running code
1 vulnerable library detected

VT does not have it: https://www.virustotal.com/en/url/549e4b05576d25fd97522ff69ebdd41d133eaff53d5d706286656c461d39683f/analysis/#additional-info

Issues: https://asafaweb.com/Scan?Url=meaganlucy.com

pol
Logged
Cybersecurity is more of an attitude than anything else. Avast Evangelists.

Use NoScript, a limited user account and a virtual machine and be safe(r)!
Pages: [1]   Go Up
« previous next »