J'ai d'abord pensé à un gros spam, mais le fait qu'il semble y avoir une capture de ce qui ressemble clairement à notre base de données (interne !) dans l'email me fait penser que c'est peut-être très sérieux, en fait ?

-------- Message transféré --------

Sujet :	I Found Vulnerability On the Site (http://lipn.univ-paris13.fr/)
Date :	Fri, 26 Jan 2018 04:30:06 +0700
De :	Arnold Panggau <arnoldtriwardhana08@gmail.com>
Pour :	contact@lipn.univ-paris13.fr, Etienne.Andre@univ-paris13.fr, mascre@univ-paris13.fr, vpdsi@univ-paris13.fr

Hello,

I found an error bug (vulnerability) on your site http://lipn.univ-paris13.fr/

It can be exploited to view and even access the table structure and contents of your database.

Introduce My Name Arnold Panggau, I am a web security tester. this link linkedin my account https://www.linkedin.com/in/arnold-panggau/

I will give you details about errors on your site and if necessary, I will help you fix them.

If you want to know where the error bug (vulnerability) and need my help to fix it, contact me.

I can also provide information so that this incident does not happen again.

This is a very dangerous mistake.

And if ignored it will happen:

1. Your site will be taken and abused by others

2. Your Sensitive Data will be stolen and misused by others

3. Your site is inaccessible

4. Your website will be planted with scripts that can record transactions on your website

5. Your Webiste can be planted back door scripts.

Here I attach evidence of vulnerability exploitation to find your DB.

Regards

Arnold Pan ggau