{"id":9741,"date":"2019-12-11T02:38:49","date_gmt":"2019-12-11T02:38:49","guid":{"rendered":"https:\/\/nsfocusglobal.com\/?p=9741"},"modified":"2026-04-17T18:07:50","modified_gmt":"2026-04-17T18:07:50","slug":"cybersecurity-insights-8","status":"publish","type":"post","link":"https:\/\/nsfocusglobal.com\/pt-br\/cybersecurity-insights-8\/","title":{"rendered":"Cybersecurity Insights-8"},"content":{"rendered":"


\n<\/p>\n

5.2 Web Attacks<\/strong><\/h2>\n

5.2.1 Trend of Web Attacks<\/strong><\/h3>\n

Of all attacks targeting web servers in 2018, 89% of them still employed common methods such as server information disclosure, resource leech, SQL injection, and cross-site scripting.<\/p>\n

\"Red<\/a><\/p>\n

Hackers are using an increasing number of web server or plug-in vulnerabilities. In 2018, vulnerability based web attacks accounted for 11% of all web attacks. It is a bit higher than in 2017 and should be taken seriously regardless of the small percentage. The most targeted web frameworks are Struts 2, Microsoft IIS, and WebLogic.<\/p>\n

\"Red<\/a><\/p>\n

5.2.2 Web Vulnerability Exploitation<\/strong><\/h3>\n

5.2.2.1 Struts 2<\/strong><\/p>\n

The struts 2 framework is still the favorite target of web attackers. From July 2007 to March 2019, 57 vulnerabilities were disclosed related to Struts 2, including remote code execution vulnerabilities extensively used by hackers because of their ease of exploitation and high level of threat. In 2018, we observed that the following vulnerabilities in Struts 2 were favored by attackers:<\/p>\n