Full Disclosure mailing list archives

Re: Two biggest Indian University Websites are vulnerable


From: Benji <me () b3nji com>
Date: Sat, 17 Jul 2010 13:14:44 +0100

But you clearly point out that Google had detected it aswell, thus
warning the users already.... (and it took 2 people on your part to
discover and screenshot this)

On Sat, Jul 17, 2010 at 1:03 PM, Sandeep Sengupta
<sandeep.sengupta () gmail com> wrote:
1. we spoke to Univ system admin over the phone yesterday. They are
aware of the problem. Now upto them how much time they will take to
rectify it. We hope they atleast have the wisdom to bring the site
down till it is debugged. They have the wisest men working for them,
after all.

2. In reply to other email from Benji, discovery consists of what
everyone has seen & thinking what nobody has thought. I had the option
of keeping quiet, but that would have kept the issue lingering &
hundreds of students would have suffered. Univ officials need to wake
up fast.

3. The matter has been published by press today morning. I have put on
full disclosure more than 12 hours later.

Warm regards,
Sandeep

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/


_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/


Current thread: