WHID 2009-39: Uno is back: 245,000 records stolen from Orange France using SQL injection

Share/Save

After focusing earlier this year on Anti-Virus vendors, Uno, the Romanian Hacker is now back and reports in his blog that an Orange France web site dedicated to photo management is vulnerable to SQL injection and that he was able to access 245,000 records from the web site.

Attack Method: 
SQL Injection
Data Item: 
Name
Password
User name
e-mail
Incident Outcome: 
Leakage of Information