Re: Security problems at the NSA Web site?

[Gadi Evron <ge () linuxbox org>]

On Tue, 27 Dec 2005, Richard M. Smith wrote:
> I just tried applying for a job at nsa.gov and got this error message:
>  
> https://www.nsa.gov/servlets/iclientservlet/applyonline/?ICType=Panel
> <https://www.nsa.gov/servlets/iclientservlet/applyonline/?ICType=Panel&Menu=
> ROLE_APPLICANT&Market=GBL&PanelGroupName=HR_RESUME_ADD_APP>
> &Menu=ROLE_APPLICANT&Market=GBL&PanelGroupName=HR_RESUME_ADD_APP
>  
>
>  
> This error message makes me wonder if there aren't more serious problems at
> the NSA Web site.  An SQL injection bug in the online job application
> database would not be good.
>  
> Richard M. Smith
> http://www.ComputerBytesMan.com
>  

I remember another issue like this a bit back, it was handled.

        Gadi.

_______________________________________________
Fun and Misc security discussion for OT posts.
https://linuxbox.org/cgi-bin/mailman/listinfo/funsec
Note: funsec is a public and open mailing list.