Vulnerability found by TEAM T!g3R on the official website of Ministry of Culture & Tourism and British Chamber of Commerce, Indonesia.
Vulnerable Website:-
http://www.budpar.go.id
http://www.britcham.or.id
Vulnerability:-
SQL-i
TEAM T!g3R also hacked into the database of these two websites and exposed sensitive data like server details, DB name, user name, password, admin details and so on.
Ministry of Culture & Tourism Indonesia:-
Admin Deatils:-
user pass
admin d3affb50918890deaf19360c7c?1d28
dadi 1601642654c68e2b?975be78915c8c7e
Database Name:-
Current DB:- budpar
Current DB:- information_schema
Web-Server:- Apache/2.2.14 (Fedora)
Hack Proof:-
For More information Click Here
British Chamber of Commerce Indonesia:-
Server Details:-
Target:- http://www.britcham.or.id
Host IP:- 202.67.9.74
Web Server:- Apache/2.2.19 (Unix) mod_ssl/2.2.19 OpenSSL/0.9.8e-fips-rhel5 DAV/2 PHP/5.2.17
Powered-by:- PHP/5.2.17
DB Server:- MySQL
Resp. Time(avg):- 2744 ms
Current User:- britcham_user1@localhost
Sql Version:- 5.0.51a-community
Current DB:- britcham_database
System User:- britcham_user1@localhost
Host Name:- asterix.serverku.com
Installation dir:- asterix.serverku.com
Installation dir:- /
DB User:- 'britcham_user1'@'localhost'
Admin Deatils:-
Data Found: user_name=britcham
Data Found: user_password=0b176060ef08c8d37d8aa756075c52ad
Data Found: user_id=1
Data Found: user_name=admin
Data Found: user_password=admin
Data Found: user_id=1
Hack Proof:-
For More information Click Here
LINK TO OUR HOME PAGE :


Categories:
vulnerablity