Hi Geeks, ***Plese read carefully before going thru it*
a) Sikkim Manipal University portal is vulnerable to SQL Injection attack. b) Calcutta University website is spreading malware via iframe code insertion. Details: a) About the university: Sikkim Manipal is one of the largest private University in India. The Institute attracts students from all over the country, with over 1700 students enrolled in the various engineering disciplines. 102 full-time faculties are employed. Type of problem: SQL Injection Vulnerable Portal: http://portal.smude.edu.in/ User Name: *sanjay* [any name will work] Password: *' OR ''=' *Choose "*Center Login*" radio button Press SUBMIT. Screenshot: http://www.isolutionindia.com/isolutionindia/disclosure/SM.JPG Effect: You have access to the main admin panel. Option to download & print ALL student records, contact information, admit cards for upcoming examinations, assignments, results, etc. Option to change password. Credit: Pradip Sharma, Surajit Biswas, Sandeep Sengupta; Cyber Security Research Analysts, iSolution Software Systems Pvt. Ltd., www.isolutionindia.com b) Calcutta University is the oldest existing University in Indian Subcontinent. Founded 1857, it is ranked 39th in the world. Vulnerability: The main page is spreading virus. www.caluniv.ac.in It has iframe code injection & pulling virus from the Russian site pantscow.ru *Hundreds will be infected while checking for results on the website.* Screenshot: http://www.isolutionindia.com/isolutionindia/disclosure/CU.JPG Credit: Arnab Kanti Choudhury, Sandeep Sengupta; Cyber Security Research Analysts, iSolution Software Systems Pvt. Ltd., www.isolutionindia.com *Disclaimer:* The above information has been published with intention that the concerned authorities will take notice & amend the bugs. People are requested not to use the above information for illegal actions. We take no responsibility of the consequences. Regards, 0xN41K -- You received this message because you are subscribed to the Google Groups "nforceit" group. To post to this group, send an email to [email protected]. To unsubscribe from this group, send email to [email protected]. For more options, visit this group at http://groups.google.com/group/nforceit?hl=en-GB.
