Exploit Allowed Anybody To Remove Any Website From Google

Status
Not open for further replies.

Jack

Administrator
Thread author
Verified
Staff Member
Well-known
Jan 24, 2011
9,378
China's been catching a lot of grief lately for ruthlessly culling scores of websites from the Internet, but as it turns out, Google may have been unintentionally doing it's part, too. Yesterday, James Breckenridge, the director of operations at UK Web Media, reported an exploit in Google's Webmaster Tools that allowed anybody to remove any website from Google's search results. And, as everybody knows, if you're not on Google, you might as well not even be on the Internet.

Search Engine Land reported on the flaw yesterday. The exploit was a simple one, too; all you had to do was log into Google Webmaster Tools and point your browser at the following address:

Code:
https://www.google.com/webmasters/tools/removals-request?hl=en&siteUrl=http://{YOUR_URL}/&urlt={URL_TO_BLOCK}



Google responded to the situation immediately, removing the ability for users to delete URLs as soon as they heard of the issue. Within seven hours, the URL removal function was back up, sans the rogue removal exploit.

More details - link
 
V

Vextor

That was a very stupid exploit to be able to be inflicted on Google's Webmaster Service. It should have patched this vulnerability ages ago, as it is a very simple one.
 
Status
Not open for further replies.

About us

  • MalwareTips is a community-driven platform providing the latest information and resources on malware and cyber threats. Our team of experienced professionals and passionate volunteers work to keep the internet safe and secure. We provide accurate, up-to-date information and strive to build a strong and supportive community dedicated to cybersecurity.

User Menu

Follow us

Follow us on Facebook or Twitter to know first about the latest cybersecurity incidents and malware threats.

Top