|
The Web Hacking Incidents Database
Last update:07 November 2007
List of incidents of class Other
Other
WASC threat
classifications:
Abuse of Functionality, Brute Force, Content Spoofing, Credential/Session Prediction, Cross-site Scripting, Defacement, Denial of Service, Directory Indexing, HTTP Response Splitting, Information Leakage, Insufficient Anti-automation, Insufficient Authentication, Insufficient Authorization, Insufficient Process Validation, Insufficient Session Expiration, Known Vulnerabity, Misconfiguration, OS Commanding, Other, Path Traversal, Phishing, Predictable Resource Location, Redirection, SQL Injection, Unknown, Weak Password Recovery Validation, Worm
There are 8 incidents of class Other
Date: 06 October 2007
Incident Type: Security Breach
WASC Threat Classification: Other
A hacker exploited a leftover admin function on eBay to block users and close sales.
References:
Date: 17 September 2007
Incident Type: Security Breach
WASC Threat Classification: Other
An Excel spreadsheet was published on containing sensitive information regarding police officers in York, England. The information included Social Security numbers of 46 offices and the home addresses of 74 offices. As a result identities of 3 offices where stolen.
While the information was pulled of line after a short period of time, it remained in the cache of several major search engines.
References:
Date: 27 March 2007
Incident Type: Security Breach
WASC Threat Classification: Other
An open source developer virtually defaced John McCain's MySpace page. He did not have to commit any crime, because the page pulled an image directly from the open source developer's site.
References:
Date: 02 March 2007
Incident Type: Security Breach
WASC Threat Classification: Other
Backdoor was planted in a new official release of WordPress, the most popular blogging software in the world. It was available for download for a few days before the backdoor was located.
References:
Date: 02 February 2007
Incident Type: Security Breach
WASC Threat Classification: Other
Hackers penetrated the Dolphins stadium web site just days before the Super Bowl was held there and modified the home page to include a Trojan inflecting script.
References:
Date: 28 October 2005
Incident Type: Security Breach
WASC Threat Classification: Insufficient Authorization, Other
Configuration mistake left an unprotected unused virtual host. No details on the configuration problems given.
References:
Date: 10 October 2005
Incident Type: Vulnerability Disclosure
WASC Threat Classification: Cross-site Scripting, Other
References:
Date: 04 October 2005
Incident Type: Security Breach
WASC Threat Classification: Other
Script upload due to a scoop known vulnerability
References:
This work is licensed under the Creative Commons Attribution License. To view a copy of this license, visit http://creativecommons.org/licenses/by/2.5/ or send a letter to Creative Commons, 559 Nathan Abbott Way, Stanford, California 94305, USA.
|
