HackersBlog Discovers BT.com Flaw

HackersBlog Discovers BT.com Flaw

The hackers who came across the flaw in Telegraph earlier this week also examined BT's web site. The people behind HackersBlog claim they were able to access BT.com's database using a blind SQL injection.  
 

According to the hackers, the "blind SQL Injection grants us way more access to larger parts of the databases then the one used to find the previous vulnerability in BT.com. Using this vulnerability an attacker can access personal data of the users."

 

HackersBlog laid claim to breaching login and personal information, which includes names, email addresses and passwords of BT's account users. The site displayed the exact details of BT.com's web issues to have it fixed by its IT support team. 

 

In addition, HackersBlog claim BT is not the only company with such web site flaws. The site acceded it will trot out resembling problems with other telephone companies.



“Don’t rush to conclusions and start pointing fingers before you see the next articles where we will show similar issues with other large telecommunication providers. As we said earlier, we don’t take sides, but rather, want to show that the above mentioned vulns [vulnerabilities] can be found almost everywhere,”  HackersBlog stated.