Subscribe to RSS - Name

Name

WHID 2009-39: Uno is back: 245,000 records stolen from Orange France using SQL injection

Share/Save

After focusing earlier this year on Anti-Virus vendors, Uno, the Romanian Hacker is now back and reports in his blog that an Orange France web site dedicated to photo management is vulnerable to SQL injection and that he was able to access 245,000 records from the web site.

Attack Method: 
SQL Injection
Incident Outcome: 
Leakage of Information
Data Item: 
Name
Password
User name
e-mail

WHID 2009-35: Former US Senator Donors Information Leaks

Share/Save

Norm Coleman, a former senator from Minnesota, is going through a legal battle to try to win back his seat in the senate. If the way he manages his web site security and the crises it created are an indicator, I am not sure that he has a place there.

Attack Method: 
Administration Error
Misconfiguration
Incident Outcome: 
Leakage of Information
Data Item: 
Credit Card Number
Credit Card Security Code
Name
e-mail