WHID 2009-8: Wired.com Image Viewer Hacked to Create Phony Steve Jobs Health Story
John Abell from Wired magazine often writes about Apple's CEO health. However, this report about Job suffering a cardiac arrest, was neither his nor true. The culprit was Wired public image viewing utility which lets people upload am image and than presented the image as part of the Wired web site, banner and domain included.
This is a wonderful example of a web application design flaw. There was nothing wrong with the code, however the design of the feature enabled it to be abused.
Further information:
Attack Method:
Incident Outcome:
