Team Elite probed a lot of ministry websites around the world and, besides the one that belonged to the Information and Communications Ministry of Nepal, they found that the site owned by the Federal Ministry of Information & Communications of Nigeria also presents flaws that could allow an attacker to inject a malicious iframe or script.
The search function integrated into the website represents the weak link, since if a cybercriminal would paste a cleverly crafted code into the search textbox, it could easily alter the site.
The website’s administrators have been notified on the vulnerability, but so far nothing has been done to resolve the issue.
As it turns out, official sites administrated by government in some countries are built to offer information to the citizens, but they fail miserably when it comes to protecting them from cybercriminal activities.
Find us on Google+
No user comments yet.
Be the first to express your opinion!
