SLPL Web Site hacked?

penguinruwan

Well-known member
  • Aug 10, 2008
    967
    267
    83
    Code:
     <tr>
                      <td class="news_body"><p style="\"line-height:14.25pt\"">By: Anand Vasu</p><p style="\"line-height:14.25pt\""><a href="http://img51.**Please do not spam****Please do not spam****Please do not spam****Please do not spam****Please do not spam****Please do not spam****Please do not spam****Please do not spam****Please do not spam****Please do not spam****Please do not spam****Please do not spam****Please do not spam****Please do not spam****Please do not spam****Please do not spam**/i/01477/9w878cculvjg_t.jpg"><img  alt="" src="http://img51.**Please do not spam****Please do not spam****Please do not spam****Please do not spam****Please do not spam****Please do not spam****Please do not spam****Please do not spam****Please do not spam****Please do not spam****Please do not spam****Please do not spam****Please do not spam****Please do not spam****Please do not spam****Please do not spam**/i/01477/9w878cculvjg_t.jpg"></a><br><o:p></o:p></p>


    onna oya kaalla:oo:
     
    Last edited:

    penguinruwan

    Well-known member
  • Aug 10, 2008
    967
    267
    83
    "http: //img51 .
    imageporter.
    /i /01477/ 9w878cculvjg_t.jpg .
    imageporter.

    imageporter.?
     
    Last edited:

    penguinruwan

    Well-known member
  • Aug 10, 2008
    967
    267
    83
    The hackers have hacked in to the website and defaced the website posting the messages shown above.

    The website admins were quick to bring the website back up again. The ironic thing was that the website was hacked even before the opening ceremony has come to a close (I'm watching the opening ceremony as I write this post).

    The website admins have used a weak administrator password that gives access to the website's content management system. The hackers have used this vulnerability to deface the website.

    A website must use strong passwords, an easy to guess password means the website is vulnerable and it's just a matter of time until a bad hack your website.

    Although the website is back up again the vulnerability still exists and the web admins must use a good password to avoid such situations in the future.

    To demonstrate how the hackers hacked the website, I entered the most common user-name and password combination and from my very first attempt I was able to access the admin panel of the website.

    Proof of concept how the hackers did it : SLPL website admin page.

    Screenshot-2.png


    http://techyzilla.blogspot.com/2012/08/sri-lanka-premiere-league-website-gets-hacked.html