5 replies to this topic

[Ken44]

Hi

I have had oscv2.3.1 installed and working fine for over a year now, however, recently I keep seeing this in whos online

http://tinyurl.com/8y2ecd2

The strange thing is that this only happens when using a Win7 PC. When I look at my admin from 2 other WinXP PCs I never see admin looking for crossdomain.xml
Today, for the first time, I noticed a customer also looking for crossdomain.xml

http://tinyurl.com/8xdz742

I checked my OSC2.3.1 code and there is no reference to crossdomain.xml in the code.

Does anyone know what this could be?

Regards

Ken

Edited by Ken44, 23 January 2012, 19:00.

[kymation]

A crossdomain.xml file is used by Adobe Flash to allow your Flash content to include content from another domain. It's a security hole if not done properly, so this could be an attempt to find a vulnerability to exploit. Or, if you have Flash content on your site, it could be perfectly normal.

Regards
Jim

[Ken44]

Hi Jim

Thanks for your reply.

My site is fairly basic, it can be seen at the links above. (just go up a level)
I have no flashy add-ons. The only thing that may use Flash Player is PHPmyVisites, however this has been installed since the site was built and has never caused a problem before.
Also, a customer does not have access to this software. Why is a customer looking for crossdomain.xml?

Regards

Ken

[nottheusual1]

They aren't a customer - probably fishing for the file to see if they can exploit its presence. First clue is that there is no reason for them to naturally create that file call - they have to form the URL. Are you using a scanning service that might be testing for that file?

[Ken44]

Hi.

It appears to be myself that is looking for this file. In ‘whos online’ it is Admin that is looking at crossdomain.xml (see the images in the first post)

Since this is only happening on Win7 then I guess this must be something to do with the operating system rather than my website.

Very strange though.

Ken

[RMD27]

kymation, on 23 January 2012, 21:16, said:

A crossdomain.xml file is used by Adobe Flash to allow your Flash content to include content from another domain. It's a security hole if not done properly, so this could be an attempt to find a vulnerability to exploit. Or, if you have Flash content on your site, it could be perfectly normal.

Regards
Jim

jim, how do you stop it?