lists.openwall.net   lists  /  announce  owl-users  owl-dev  john-users  john-dev  passwdqc-users  yescrypt  popa3d-users  /  oss-security  kernel-hardening  musl  sabotage  tlsify  passwords  /  crypt-dev  xvendor  /  Bugtraq  Full-Disclosure  linux-kernel  linux-netdev  linux-ext4  PHC 
Open Source and information security mailing list archives
 
Hash Suite for Android: free password hash cracker in your pocket
[<prev] [next>] [<thread-prev] [day] [month] [year] [list]
Date: Tue, 24 Mar 2009 15:48:49 +0100
From: "Anders Klixbull" <akl@...erian.dk>
To: "null null" <giimale@...il.com>,
	<full-disclosure@...ts.grok.org.uk>
Subject: Re: Idea cellular (ideacellular.com) SQL
	Injectionvulnerability in Corporate Account Login

We care
We really really do 

-----Original Message-----
From: full-disclosure-bounces@...ts.grok.org.uk
[mailto:full-disclosure-bounces@...ts.grok.org.uk] On Behalf Of null
null
Sent: 24. marts 2009 14:50
To: full-disclosure@...ts.grok.org.uk
Subject: [Full-disclosure] Idea cellular (ideacellular.com) SQL
Injectionvulnerability in Corporate Account Login

Hi,


Organization
-------------------
http://ideacellular.com
Idea Cellular, Aditya Birla Group
It is one of the major telecom companies in India.


Problem
-------------
Sql injection in Corporate Account Login

Dates
--------------
Reported: 17th March 2009
Fixed:       23rd March 2009

Credits
----------
Aseem Jakhar - Member NULL security community http://null.co.in

Problem Description
-----------------------------
There was a sql injection vulnerability in the corporate Account login
on the ideacellular.com website. They were doing client side validation
only, which could be easily bypassed. It could lead to unauthorized
access and database manipulation.


--
Cheers,
@
http://null.co.in

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/

Powered by blists - more mailing lists

Powered by Openwall GNU/*/Linux - Powered by OpenVZ