princeton.edu SQL injection/SQL username:password

Re: princeton.edu SQL injection/SQL username:password

thrill — Mon, 25 May 2009 01:20:25 -0500

She wasn't a teacher.. she was the manager of the IT department in the Administrative Information Systems.. yeah.. those same people who do control the mainframe with all the SS#'s and other vital information on all students, staff and faculty.. but yes, we do not have anything a hacker would want.. oh yeah, and linux is a 'hobby' OS, it'll never be mainstream.. another choice quote from her in 1999.. :)

Re: princeton.edu SQL injection/SQL username:password

PaPPy — Sun, 24 May 2009 23:52:50 -0500

lol, other than SSNs or some super computer that i can get my hands on to...dumb teachers

Re: princeton.edu SQL injection/SQL username:password

thrill — Sun, 24 May 2009 23:45:01 -0500

hmm.. maybe my old UCLA boss, Karen M. is advising them on security.. she once told me "we're a school, we have nothing a hacker would want!".. :)

Re: princeton.edu SQL injection/SQL username:password

PaPPy — Sun, 24 May 2009 22:12:44 -0500

i think that was stated in the subject and first post...

Re: princeton.edu SQL injection/SQL username:password

wireghoul — Sun, 24 May 2009 20:42:38 -0500

Even worse, www-01dept.princeton.edu:3308 is internet facing and the error string contains the login. I hope your school is not storing any sensitive information in said database and that they are preparing an official breach statement.

Re: princeton.edu SQL injection/SQL username:password

Kyo — Sat, 23 May 2009 11:22:31 -0500

it's always a major issue

http://wws.princeton.edu/webmedia/list_speakers.xml?start=f%27%20OR%201=0%20UNION%20SELECT%201--%20-

princeton.edu SQL injection/SQL username:password

DanielG — Sat, 23 May 2009 09:10:00 -0500

http://wws.princeton.edu/webmedia/list_speakers.xml?start=f'

generates the error:
RXML run error: Query failed:[...]
www-01dept.princeton.edu:3308 is connectable from the internet, and the user:password works.

Is this like a major issue since it's a well known school?