Welcome to WebmasterWorld Guest from 54.205.75.60

Forum Moderators: mack

Message Too Old, No Replies

MSN Search PageJacking Critical Flaw

Looks like MSN has the same critical problem as Google

   
4:46 pm on Nov 12, 2004 (gmt 0)

10+ Year Member



I have started seeing links from places where they shouldn't be. A quick examination of the results shows that the database is nailed.

I'll take the New Scientist as an example and pick a site they link to:

Query-
link:www.reviewcentre.com newscientist.com

URL-
[beta.search.msn.com...]

Check the cache on a lot of the results - its their content but not their site.

Pages show up with the New Scientist content on it, even though the headers are:

[nsplus.com...]
HTTP Status Code: HTTP/1.1 302 Moved Temporarily
Date: Fri, 12 Nov 2004 16:32:09 GMT
Server: Orion/2.0.3
Content-Length: 195
Connection: Close
Content-Type: text/plain
Location: [newscientist.com...]
Redirect Target: [newscientist.com...]

#2 Server Response: [newscientist.com...]
HTTP Status Code: HTTP/1.1 200 OK
Date: Fri, 12 Nov 2004 16:32:10 GMT
Server: Orion/2.0.3
Set-Cookie: JSESSIONID=HCEODGICMKLE; Path=/
Cache-Control: private
Connection: Close
Content-Type: text/html;charset=UTF-8

Blatantly not the new scientist.

-----------------------------------
PastyPosse (aka dodgy surfer dudes)
-----------------------------------

7:21 pm on Nov 12, 2004 (gmt 0)

WebmasterWorld Senior Member 10+ Year Member



Hmmm. The "new" MSN search is supposed to have been built "from scratch" by MS engineers. I guess that must be a pretty common programming error. We saw it with Yahoo's results not so long ago, too. Fancy that.

( Welcome to the forums, pastypossie! )