{"id":845,"date":"2008-05-26T20:37:37","date_gmt":"2008-05-26T18:37:37","guid":{"rendered":"http:\/\/volker-schering.de\/weblog\/index.php\/2008\/05\/26\/unser-innenminister-und-die-sicherheit\/"},"modified":"2008-05-26T20:42:33","modified_gmt":"2008-05-26T18:42:33","slug":"unser-innenminister-und-die-sicherheit","status":"publish","type":"post","link":"https:\/\/volker-schering.de\/weblog\/2008\/05\/26\/unser-innenminister-und-die-sicherheit\/","title":{"rendered":"Unser Innenminister und die Sicherheit"},"content":{"rendered":"<p>Die Suchfunktion auf der Seite wolfgang-schaeuble.de filtert keinen HTML- und Scritpcode aus den Anfragen und erlaubt dadurch solche <a href=\"http:\/\/www.wolfgang-schaeuble.de\/?search=%3C\/strong%3E%3C\/div%3E%3Cdiv%20style=position:absolute;left:8pt;top:0pt;background-color:white;width:95%;%3E24.05.2008%3C\/div%3E%3Cdiv%3E%3Ch2%3EBundesinnenminister%20tritt%20zur%FCck%3C\/h2%3E%3Cp%3Ew%E4re%20eine%20Meldung,%20die%20sicher%20viele%20gerne%20lesen%20w%FCrden.%20Allerdings%20handelt%20es%20sich%20nur%20um%20eine%20Cross-Site-Scripting-Schwachstelle%20im%20der%20Webseite%20des%20Politikers,%20der%20gerne%20die%20Online-Durchsuchung%20einf%FChren%20m%F6chte.%20Scherzbolde%20k%F6nnen%20dadurch%20beliebige%20Meldungen%20unter%20der%20Dom%E4ne%20wolfgang-schaeuble.de%20erstellen.%3C\/p%3E%3Cp%3EDer%20Fehler%20liegt%20in%20der%20Suchfunktion%20des%20Internetauftritts,%20die%20HTML-%20und%20Skriptcode%20in%20Anfragen%20nicht%20ausfiltert.%20Gr%FC%DFe%20an%20dmk.%3C\/p%3E%3C\/div%3E%3Cdiv%20style=display:none%3E%3Cstrong%3E&#038;id=38&amp;no_cache=1\">Meldung<\/a>.<br \/>\n \ud83d\ude06<br \/>\n<!--more--><br \/>\nSollte der Fehler behoben sein, hier eine lokale Kopie der gefakten Meldung:<\/p>\n<p><a href='http:\/\/volker-schering.de\/weblog\/wp-content\/uploads\/2008\/05\/schaeublexss.jpg'><img loading=\"lazy\" decoding=\"async\" src=\"http:\/\/volker-schering.de\/weblog\/wp-content\/uploads\/2008\/05\/schaeublexss-300x164.jpg\" alt=\"\" title=\"schaeublexss\" width=\"300\" height=\"164\" class=\"alignnone size-medium wp-image-846\" srcset=\"https:\/\/volker-schering.de\/weblog\/wp-content\/uploads\/2008\/05\/schaeublexss-300x164.jpg 300w, https:\/\/volker-schering.de\/weblog\/wp-content\/uploads\/2008\/05\/schaeublexss.jpg 959w\" sizes=\"auto, (max-width: 300px) 100vw, 300px\" \/><\/a><\/p>\n","protected":false},"excerpt":{"rendered":"<p>Die Suchfunktion auf der Seite wolfgang-schaeuble.de filtert keinen HTML- und Scritpcode aus den Anfragen und erlaubt dadurch solche Meldung. \ud83d\ude06<\/p>\n","protected":false},"author":2,"featured_media":846,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"wikipediapreview_detectlinks":true,"_jetpack_memberships_contains_paid_content":false,"footnotes":""},"categories":[1],"tags":[],"class_list":["post-845","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-allgemein"],"jetpack_featured_media_url":"https:\/\/volker-schering.de\/weblog\/wp-content\/uploads\/2008\/05\/schaeublexss.jpg","jetpack_sharing_enabled":true,"_links":{"self":[{"href":"https:\/\/volker-schering.de\/weblog\/wp-json\/wp\/v2\/posts\/845","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/volker-schering.de\/weblog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/volker-schering.de\/weblog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/volker-schering.de\/weblog\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/volker-schering.de\/weblog\/wp-json\/wp\/v2\/comments?post=845"}],"version-history":[{"count":0,"href":"https:\/\/volker-schering.de\/weblog\/wp-json\/wp\/v2\/posts\/845\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/volker-schering.de\/weblog\/wp-json\/wp\/v2\/media\/846"}],"wp:attachment":[{"href":"https:\/\/volker-schering.de\/weblog\/wp-json\/wp\/v2\/media?parent=845"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/volker-schering.de\/weblog\/wp-json\/wp\/v2\/categories?post=845"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/volker-schering.de\/weblog\/wp-json\/wp\/v2\/tags?post=845"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}