iis

A large number of IIS-hosted websites are potentially vulnerable to a newly discovered SQL injection attack, report Hackademix and the Internet Storm Center. Thousands of sites have been compromised since January, mostly where web developers have failed to sanitize their user inputs properly.