Systeme

Download

systeme@lipn.univ-paris13.fr

February 2018

30 participants
31 discussions

Fwd: Re: I Found Vulnerability On the Site (http://lipn.univ-paris13.fr/)
by Étienne André 02 Feb '18

02 Feb '18

Pour info (bis) -------- Message transféré -------- Sujet : Re: I Found Vulnerability On the Site (http://lipn.univ-paris13.fr/) Date : Thu, 1 Feb 2018 12:42:12 +0700 De : Arnold Panggau <arnoldtriwardhana08(a)gmail.com> Pour : contact(a)lipn.univ-paris13.fr, Etienne.Andre(a)univ-paris13.fr, mascre(a)univ-paris13.fr, vpdsi(a)univ-paris13.fr Hello, I am waiting for your answer, what about the vulnerability of this site, do you ignore it ? Thanks On 26 January 2018 at 04:30, Arnold Panggau <arnoldtriwardhana08(a)gmail.com <mailto:arnoldtriwardhana08@gmail.com>> wrote: Hello, I found an error bug (vulnerability) on your site http://lipn.univ-paris13.fr/ <http://lipn.univ-paris13.fr/> It can be exploited to view and even access the table structure and contents of your database. Introduce My Name Arnold Pang gau, I am a web security tester. this link linkedin my account _https://www.linkedin.com/in/arnold-panggau/ <https://www.linkedin.com/in/arnold-panggau/>_ I will give you details about errors on your site and if necessary, I will help you fix them. If you want to know where the error bug (vulnerability) and need my help to fix it, contact me. I can also provide information so that this incident does not happen again. This is a very dangerous mistake. And if ignored it will happen: 1. Your site will be taken and abused by others 2. Your Sensitive Data will be stolen and misused by others 3. Your site is inaccessible 4. Your website will be planted with scripts that can record transactions on your website 5. Your Webiste can be planted back door scripts. Here I attach evidence of vulnerability exploitation to find your DB. -- *Regards * *Arnold Panggau * -- *Regards * *Arnold Panggau * !DSPAM:468,5a72a804273241877711386!

8 17