{"id":1213,"date":"2009-02-09T09:43:32","date_gmt":"2009-02-09T08:43:32","guid":{"rendered":"http:\/\/www.itwriting.com\/blog\/1213-kaspersky-site-hacked-through-sql-injection.html"},"modified":"2009-02-09T09:43:32","modified_gmt":"2009-02-09T08:43:32","slug":"kaspersky-site-hacked-through-sql-injection","status":"publish","type":"post","link":"https:\/\/www.itwriting.com\/blog\/1213-kaspersky-site-hacked-through-sql-injection.html","title":{"rendered":"Kaspersky site hacked through SQL injection"},"content":{"rendered":"

There are millions of sites out there vulnerable to SQL injection; apparently one of them (at least until yesterday) was that of the security software vendor kaspersky.com<\/a>. A hacker codenamed unu posted details<\/a> \u2013 not all the details, but enough to show that the vulnerability was real. The hack exposed username tables and possibly personal details. Reddit has a discussion<\/a> of the programming issues. According to the Reg<\/a>, Kaspersky had been warned but took no action:<\/p>\n

\n

I have sent emails to info@kaspersky.com, forum@kaspersky.com, and webmaster@kaspersky.com warning Kasperky [sic] about the problem but I didn’t get any response," Unu, the hacker, said in an email. "After some time, still having no response from Kaspersky, I have published the article on hackersblog.org regarding the vulnerability.<\/p>\n<\/blockquote>\n

The trouble with those kinds of email addresses is that they are unlikely to get to the right people. It\u2019s still disappointing; and also disappointing that there is currently no mention of the issue (that I can see) on Kaspersky\u2019s site. The company\u2019s response to the security hole is equally as important as the vulnerability itself. When WordPress was hacked<\/a>, founder Matt Mullenweg was everywhere responding to comments \u2013 on this blog<\/a>, for example. I liked that a lot.<\/p>\n

Technorati tags: kaspersky<\/a>, sql injection<\/a>, mysql<\/a><\/div><\/p>\n","protected":false},"excerpt":{"rendered":"

There are millions of sites out there vulnerable to SQL injection; apparently one of them (at least until yesterday) was that of the security software vendor kaspersky.com. A hacker codenamed unu posted details \u2013 not all the details, but enough to show that the vulnerability was real. The hack exposed username tables and possibly personal … Continue reading Kaspersky site hacked through SQL injection<\/span> →<\/span><\/a><\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[75,80,83],"tags":[],"class_list":["post-1213","post","type-post","status-publish","format-standard","hentry","category-security","category-software-development","category-sql"],"_links":{"self":[{"href":"https:\/\/www.itwriting.com\/blog\/wp-json\/wp\/v2\/posts\/1213","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.itwriting.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.itwriting.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.itwriting.com\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.itwriting.com\/blog\/wp-json\/wp\/v2\/comments?post=1213"}],"version-history":[{"count":0,"href":"https:\/\/www.itwriting.com\/blog\/wp-json\/wp\/v2\/posts\/1213\/revisions"}],"wp:attachment":[{"href":"https:\/\/www.itwriting.com\/blog\/wp-json\/wp\/v2\/media?parent=1213"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.itwriting.com\/blog\/wp-json\/wp\/v2\/categories?post=1213"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.itwriting.com\/blog\/wp-json\/wp\/v2\/tags?post=1213"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}