Multiple vulnerability found in University of Ghana's website

Multiple vulnerability found in University of Ghana's website By Zero. According to him there are non-persistence XSS vulnerability and also SQL-i vulnerability.

Vulnerable Website:-

http://www.ug.edu.gh/

Vulnerable link :-

http://www.ug.edu.gh/index1.php?SearchCriteria=%3E%22%3E%3CIMG%20src=%22http://fc04.deviantart.net/fs48/f/2009/226/e/3/Zero_Wallpaper_by_Zero1122.jpg%22%3E%3C/MARQUEE%3E&x=42&y=14&submitted=Go

The Hacker also exposed the Database including Admin credentials (User Name & Password Hash) and other users login details.

Database :-

http://pastebin.com/Guqefc4j

 

Source

Posted in: cyber news