Reply to thread

Message: <blockquote data-quote="penguinruwan" data-source="post: 13683344" data-attributes="member: 118575">The hackers have hacked in to the website and defaced the website posting the messages shown above.The website admins were quick to bring the website back up again. The ironic thing was that the website was hacked even before the opening ceremony has come to a close (I'm watching the opening ceremony as I write this post).The website admins have used a weak administrator password that gives access to the website's content management system. The hackers have used this vulnerability to deface the website.A website must use strong passwords, an easy to guess password means the website is vulnerable and it's just a matter of time until a bad hack your website.Although the website is back up again the vulnerability still exists and the web admins must use a good password to avoid such situations in the future.To demonstrate how the hackers hacked the website, I entered the most common user-name and password combination and from my very first attempt I was able to access the admin panel of the website.Proof of concept how the hackers did it : SLPL website admin page.<img src="http://4.bp.blogspot.com/-etHM56mcLTo/UCVPG5XeiFI/AAAAAAAAB6c/TAIyRKmynB0/s1600/Screenshot-2.png" alt="" class="fr-fic fr-dii fr-draggable " style="" /><a href="http://techyzilla.blogspot.com/2012/08/sri-lanka-premiere-league-website-gets-hacked.html" target="_blank">http://techyzilla.blogspot.com/2012/08/sri-lanka-premiere-league-website-gets-hacked.html</a></blockquote>

Verification: Hata thunen beduwama keeyada? (60 bedeema thuna)

Top Bottom