posts - 431,  comments - 344,  trackbacks - 0
          原文地址:http://www.javaeye.com/news/5534-usakasperskycom-hacked-full-database-acces-sql-injection
          卡巴斯基是一個安全和反病毒公司市場,但是它好像不能保護他們自己的資料庫,國外黑客公布了利用SQL注入的漏洞獲得其數(shù)據(jù)庫內(nèi)容:http://hackersblog.org/2009/02/07/usakasperskycom-hacked-full-database-acces-sql-injection/

          有SQL注入漏洞的站點是卡巴斯基的美國站點(http://usa.kaspersky.com/),是放出了一些截圖:
          數(shù)據(jù)庫版本,用戶名等信息


          鏈接數(shù)據(jù)庫的用戶名和密碼信息


          該黑客非常“厚道”地表示不會公布任何用戶信息和激活碼的信息,只是公布了數(shù)據(jù)庫中的表名:
          codes
          users
          vouchers
          affectstable
          bugs_settings
          bugshistory
          bugstable
          builds
          categories
          commentstable
          computertable
          editions
          filestable
          frontpage
          grouptable
          ignoretable
          milestones
          paks
          pmtable
          priority
          repfielddetail
          repfields
          repfieldset
          repoptiondetail
          repoptions
          repquick
          severity
          statustable
          substable
          userstable
          admin_users
          best_buy
          cms
          cyberCrimeRegs
          email_list
          fr_link
          fr_link_import
          interview_request
          k_test_users
          kbfaq
          kbfaq_import
          kbrub
          kbrub_bu
          kbrub_import
          login_stats
          menu
          menu_relations
          menus
          node
          partners
          partners_bu
          portal_cms_prod_ann
          portal_cms_recent_articles
          portal_cms_whats_new
          portal_product_orders
          product_names
          retail_login_stats
          retail_partners
          retail_users
          se_login_stats
          se_partners
          se_users
          setup
          shopping_com_sales
          smnr_items
          smnr_items_bu
          trials
          trials_bu
          trials_downloaded_new
          trials_rpts
          users
          users_bu
          it_hardware
          activation_code_problem
          admin_users
          best_buy
          cms
          cyberCrimeRegs
          e5users
          email_list
          fr_link
          fr_link_bu
          fr_link_import
          interview_request
          k_test_users
          kbfaq
          kbfaq_bu
          kbfaq_import
          kbrub
          kbrub_bu
          kbrub_import
          kbtop_pop
          login_stats
          menu
          menu_relations
          menus
          ms_crm_files
          ms_crm_files_support
          ms_crm_intermediary
          ms_crm_intermediary_bu
          ms_crm_intermediary_support
          node
          opt_out
          partners
          partners_bu
          portal_cms_prod_ann
          portal_cms_recent_articles
          portal_cms_whats_new
          product_names
          retail_login_stats
          retail_partners
          retail_users
          se_login_stats
          se_partners
          se_users
          setup
          shopping_com_sales
          smnr_events
          smnr_items
          smnr_items_bu
          test_users
          test_users_new
          trials
          trials_bu
          trials_downloaded
          trials_downloaded_new
          trials_rpts
          users
          users_bu
          virus_watch
          columns_priv
          db
          func
          help_category
          help_keyword
          help_relation
          help_topic
          host
          proc
          procs_priv
          tables_priv
          time_zone
          time_zone_leap_second
          time_zone_name
          time_zone_transition
          time_zone_transition_type
          user
          codes
          stores
          stores_bu
          users
          posted on 2009-02-10 13:19 周銳 閱讀(251) 評論(0)  編輯  收藏 所屬分類: Other
          主站蜘蛛池模板: 贵德县| 贡山| 田林县| 科技| 宁强县| 濮阳县| 迁西县| 青神县| 土默特右旗| 乐陵市| 潼关县| 出国| 余姚市| 确山县| 青龙| 洪洞县| 泉州市| 河源市| 扶风县| 深圳市| 从化市| 福安市| 甘南县| 凌海市| 鄂伦春自治旗| 桃江县| 西青区| 尚义县| 太原市| 荔浦县| 旌德县| 久治县| 邢台市| 略阳县| 永兴县| 阳泉市| 甘南县| 平凉市| 和政县| 锦屏县| 芜湖县|