3 ms·
Most of the blog exploits on the web (including the one in the article) seem to be focused on WordPress. Are there are a large number of people exploiting vulne
by martey 18y ago
Most of the blog exploits on the web (including the one in the article) seem to be focused on WordPress. Are there are a large number of people exploiting vulnerabilities in other blogging platforms, like Movable Type?
- niels_olson 18y agotarget platform is presumably based on the dominance of the platform in the market. http://www.google.com/trends?q=joomla%2C+wordpress%2C+drupal%2C+mediawiki%2C+django%2C+sakai%2C+moodle%2C+mambo%2C+movable+type http://www.google.com/trends?q=joomla%2C+wordpress%2C+drupal...
- mmagin 18y agoFirst, I assume this is for the same reason that most viruses are for Windows -- WordPress is one of the most common species in the ecosystem. Also, If I understand the architecture of Movable Type correctly, it renders much of the site into static pages. I would expect that this tends to reduce the number of points where vulnerabilities would be possible, at least as far as points where it might be exploited via causing it to execute with malicious parameters via an HTTP request. i.e. In Wordpress, every page you load is the result of the execution of some PHP scripts, while in a blog that is rendered to a bunch of static files, it's conceivable that the only thing that unauthenticated users can mess with is the comment system.
- omouse 18y agoYep, much of Movable Type is static. I think there is an option for dynamic pages but by default it's static.