WHID 2009-39: Uno is back: 245,000 records stolen from Orange France using SQL injection

Updated: 
26 May 2009
Attack Information
WHID ID: 
2009-39
Date Occured: 
26 May 2009
Attack Method: 
Outcome Information
Target Information
Attacked Entity Field: 
Service Providers
Attacked Entity Geography: 
France
Source Information
Attack Source Geography: 
Romania

After focusing earlier this year on Anti-Virus vendors, Uno, the Romanian Hacker is now back and reports in his blog that an Orange France web site dedicated to photo management is vulnerable to SQL injection and that he was able to access 245,000 records from the web site.