[Fumentazo]

A year ago, I discovered a security vulnerability in the sales personnel panel of Finnair, a Finnish airline company. The flaw was in the authentication logic, where several sales personnel panel sites failed to enforce proper login checks. Using this, I was able to access the sales administrator panel and extract information for 78 employees, including their First Name, Last Name, Email Address, Work Level, and Password Hash. The passwords were stored as easily crackable MD5 hashes.

Samples:

Thibaud;Rohmer;thibaud.rohmer@finnair.com;sysadmin;90a3ed9e32b2aaf4c61c410eb925426119e1a9dc53d4286ade99a809

Heidi;Pajari;heidi.pajari@finnair.com;sales;90a3ed9e32b2aaf4c61c410eb925426119e1a9dc53d4286ade99a809

(Some passwords are the same for some reason)

Link:

Hidden Content

You must register or login to view this content.

[Nafuny]

Thanks a lot for the post

[HassaMassa]

Nice work bud, thank you.

[Friday]

Thx, just gonna look up for some.

[ron1234]

post for the content