[lodestone2]

is it safe to visit a website that has been attacked with SQL injection? ..as an example google www.wowyeye.cn www.killwow1.cn and look at the websites that have been compromised by these Chinese domains, if by chance if you surf to a site "taken over" can that website with the attack host files be downloaded to your browser?

[lunarlander]

SQL injection attacks are aimed towards making the website database reveal data. SQL injection can also modify data too. But I dont think it will affect an end user PC.

[lunarlander]

Now I just read some news today and in this case, the attacker used SQL Injection to get in, and modified some page on the website and redirects visitors to a malicious web server which installed malware onto people's PCs.

[lodestone2]

and as you look at the google pages of the compromised websites, McAfee site advisor gives the sites a green?, no red?...

[mrss]

Originally Posted by lodestone2

and as you look at the google pages of the compromised websites, McAfee site advisor gives the sites a green?, no red?...

Siteadvisor is not real time, so if a green site gets hijacked, it still shows green.