Contributors

Jeremiah Grossman
(WhiteHat Security)

Ofer Shezaf
(Breach Security) [Project Leader]

The Web Hacking Incidents Database
Last update:17 February 2008

List of Incidents for a Classification

Please note that classifications are a new feature and not all entries in WHID are already classified, so when you get a certain number of entries for a classification, WHID might have more records matching that classification that we did not classify yet. We hope to complete the classification process soon.

Select classification:
Attack Method, Country, Location, Origin, Outcome, Software, Vertical

Select criteria for classification "Vertical":
Education, Entertainment, Finance, Government, Health, Information Services, Internet, Marketing, Media, Politics, Retail, Security & Law Enforcement, Service Providers, Sports, Technology


List of incidents for which Vertical is Entertainment
2 incidents listed
WHID 2008-09: Hacking Stage 6
Reported: 10 February 2008
Occurred: 09 February 2008

Classifications:

  • Attack Method: Unknown
  • Country: USA
  • Outcome: Leakage of Information
  • Vertical: Entertainment

Sensitive information about people who created an account on the site leaked and was published through IRC.

References:

WHID 2008-04: RIAA web site cleared
Reported: 22 January 2008
Occurred: 20 January 2008

Classifications:

  • Attack Method: Cross Site Scripting (XSS)
  • Attack Method: SQL Injection
  • Attack Method: Denial of Service
  • Attack Method: SQL Injection
  • Country: Global
  • Country: USA
  • Outcome: Defacement
  • Outcome: Downtime
  • Outcome: Defacement
  • Vertical: Entertainment

The web site of RIAA, the Recording Industry Association of America was attacked twice using SQL injection over the weekend. First a query that takes particularly long time was posted on a social network web site causing a distributed denial of service attack against the site. Later on hackers found and abused additional SQL injection and XSS vulnerabilities resulting in major defacement of the site.

References:



This work is licensed under the Creative Commons Attribution License. To view a copy of this license, visit http://creativecommons.org/licenses/by/2.5/ or send a letter to Creative Commons, 559 Nathan Abbott Way, Stanford, California 94305, USA.

 
© Copyright 2005, Web Application Security Consortium. All rights reserved.