United
Loading....
- Yahoo! again - XSS in Uncategorized (357 Visits)
- Yahoo! again - bad settings? in Uncategorized (252 Visits)
- Fanii nostri in Uncategorized (183 Visits)
- Frustrant in Uncategorized (146 Visits)
- La multi ani România, la multi ani românilor in Uncategorized (137 Visits)
- Weblog.ro - Shell via Local File Inclusion in Uncategorized (119 Visits)
- Yahoo! epic fail - permanent xss unleashed in Uncategorized (50 Visits)
- ... in Uncategorized (38 Visits)
- XSS Ownage - hi5 vs. Yahoo! + video in Uncategorized (2 Visits)
- Ce nu se invata la scoala - Tipuri si tehnici spam/Hi5 (4) in Uncategorized (2 Visits)
- Ce servicii de mail folositi? in (121 Visits)
- Azi este ziua userilor hackersblog.org in (120 Visits)
- De reţinut in (117 Visits)
- Inca o pierdere de timp in (107 Visits)
- De tinut minte in (106 Visits)
- Twitter in (78 Visits)
- Un nou membru in (74 Visits)
- Interviu la Radio Lynx in (70 Visits)
- 2009 in (51 Visits)
- Editori noi. in (35 Visits)
- Ce nu se invata la scoala - Tipuri si tehnici spam/mail (2) in (199 Visits)
- Ce nu se invata la scoala - Tipuri si tehnici spam (1) in (139 Visits)
- Ce nu se invata la scoala - (D)DOS (5) in (104 Visits)
Posted on May 29th, 2009
After orange.co.uk it looks like Sugababes website is another victim of daemien curiosity.
A post on RST (if you are outside of Romania click here) show us some info’s to prove that intrusion is real:
LINK:http://sugababes.com/show-detail.php?id=27
Server = Apache/2.2.0 (Fedora)
Version = 4.1.12
Powered by = PHP/5.1.2
Current User = sugababes@vv44web01
Current Database = sugababes
Supports Union = yes
Union Columns = 8
Tables:phpbb_users
phpbb_users
diary
news
Columns: Table phpbb_users
username
user_email
user_icq
user_id
user_level
user_password
You can see some users and passwords hashes too and the vulnerable parameter posted by benny_loppa.
The Net is a new playground for the new generations.
May 29th, 2009 at 3:41 am
eh, nu chiar asa de dulci precum ar parea…
May 29th, 2009 at 8:31 pm
So simple to prevent SQLi attacks and so many vulnerabilities out there, even on critical websites (not talking about this one of course)