full-disclosure - 3ware web is all big hole

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [day] [month] [year] [list]

Date: Sat, 22 Nov 2008 13:08:13 +0200
From: Tonu Samuel <tonu@....ee>
To: full-disclosure@...ts.grok.org.uk
Subject: 3ware web is all big hole

Hi!

After endless reports and attempts to report over years to let 3ware
know about their SQL injection holes they still have all data
unprotected. Up to reader what to think about me or this company. I just
supply screenshot which I tried to report many times discretely:

http://no.spam.ee/~tonu/3wareagain.png

Previous problems include stuff like ' or 'a'='a logins and so on.

  Tõnu

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/