Bitcoin Forum
December 10, 2016, 01:32:30 AM *
News: To be able to use the next phase of the beta forum software, please ensure that your email address is correct/functional.
 
   Home   Help Search Donate Login Register  
Pages: [1]
  Print  
Author Topic: Evidence of the SQL injections at MtGox  (Read 681 times)
bitsalame
Donator
Hero Member
*
Offline Offline

Activity: 616


Preaching the gospel of Satoshi


View Profile
June 19, 2011, 10:04:32 PM
 #1

Check the leaked user db:

Code:
hehehe:$1$NZ48ESxe$OMi3O9dnz8BYH92tCf.2A/
16235e42d9e24b236d2d4199:$1$IOOzfxMY$opZ2LnvPAz8mTTfPMkWDJ0
hehehe16235e4255951b319c0b4251:$1$cItuRw49$iqqj0GL8gbrGXaIBRH3UZ0
hehehe\':$1$USDebpwM$4No7PaNkFl2uQjo6VYt2F1
hehehe%27:$1$Z8VXZePd$v6i3MZaIRBqAmSka.9eWC1
hehehe\0\':$1$5G.DrQ9A$IC/7j46weU8GRFoNZSFBy/
hehehe\'waitfor delay\'0:0:20\'--:$1$T6yRted3$bmSQXQSYrVKqq0JWLyOMJ.
hehehe\')waitfor delay\'0:0:20\'-:$1$OzcLllL9$ZbXFPAB.Pfjak/VxOIOeE0
hehehe\':
hehehe\':0)waitfor delay\'0:0:
hehehe\':0
hehehe13505493\' or 1=1-- :$1$eD2QR9wb$n2ES9mryOwb39m07EdVja1
hehehe13505493\' or 1=2-- :$1$yh5tknjZ$5Pi3E44d9lC6jmlwtL5250
hehehe\' and 1=1-- :$1$7OR.qKMW$M1gLES96gr6a/fb/o1ToL.
hehehe\' and 1=2-- :$1$W/mj92FN$SeBF1uKItpztF0Gcpgha71
hehehe\":$1$Xclf9zYB$kGurv/zPglRMJB1r9mLos1
hehehe..\\..\\..\\..\\..\\..\\..\\..\\:$1$wfWxEq/f$hVs96YAc3f6T5HtBpZnGt.
hehehe..\\..\\..\\..\\..\\..\\..\\..\\:$1$J0YW1ZtL$UglwEbkD0t076yqUckM5h1
hehehe../../../../../../../../:$1$mDA8RuIk$MbA2/jDB2e6.JjjIEnIN/0
hehehe../../../../../../../../:$1$tYEuSw6j$PcXJwu4onY8bhxQG.SMNb/
hehehe..\\..\\..\\..\\..\\..\\..\\..\\:$1$RoVqlFLH$78g0BmMgcLmAiSsgusdd90
hehehe..\\..\\..\\..\\..\\..\\..\\..\\:$1$23k9YpGs$IyF2bEcQAZFffDd5.9a1O/
hehehe../../../../../../../../:$1$SbzGxMYr$G8p9GJSavED0gJ.B0MQ8m/
hehehe../../../../../../../../:$1$kPJWfKEm$c01Ga/ZKxFzw5HZJwr438/

Motherfucker.

Please MtGox, don't fucking tell me that this "hehehe" was actually the culprit.
You are really in a bad position and have a fucking PR nightmare.
Don't make it even worse with the rollbacks: it will be a death sentence for you.
Pages: [1]
  Print  
 
Jump to:  

Sponsored by , a Bitcoin-accepting VPN.
Powered by MySQL Powered by PHP Powered by SMF 1.1.19 | SMF © 2006-2009, Simple Machines Valid XHTML 1.0! Valid CSS!