More university websites prove themselves to be weak for hackers

Dec 14, 2011 16:07 GMT  ·  By

A hacker called SODT from Doxsters.net managed to breach the defense mechanisms implemented on the websites belonging to the School of Computing and Information Systems of the University of Tasmania (utas.edu.au) and the Rutgers State University of New Jersey (Rutgers.edu).

The hacker obtained access to their databases revealing log-in credentials, enough for anyone to take a peek at all the data they store.

“Been a while since I last hacked anything but I was just looking around and stumbled upon this,” said the hacker in a post on an underground forum.

He also claims that he managed to access the website of the Tulane University Law School’s Payson Center, but decided not to post any of the information he found.

Since probably none of the universities were aware of the major flaws their websites have, I’ve sent them each an email, advising them to take the appropriate measures to make sure the websites become secure.

Update. Rutgers University replied to my inquiry stating that their Office of Information Protection and Security is currently looking into the matter.

Update2. Rutgers University Computing Incident Response Team said that while the passwords obtained by the hackers can be found in their documentation, they're not actually the real passwords used at the time.