Website of Standford University hacked again. A hacker GreyerSting found SQL injection vulnerability in the website and expose the database.
This website was also hacked few days back but nothing is patched yet.
Hacker said,”“I was just bored and noticed the vulnerability and decided to exploit it.”
Database tables contain 978 records with first and last names, email addresses, phone numbers, physical addresses and other details of registered members in the website.
I hope information security team of the Standford University will patch these issue soon. But it is really disappointing that the vulnerability still exists even after 10 days when the website was first hacked with the same vulnerability. SQL injection is a well known and dangerous vulnerability and we can not expect this in the website of this reputed university.