NASA ‘Space your Face’ domain hacked
Another basic security loop-hole in NASA website lead to a Hack. This time hacker going by name “p0ison-r00t” deface a sub domain of NASA (http://spaceyourface.nasa.gov/).
The hacked sub domain running a web application using flash, that allow visitors to create some funny videos of Space using Faces. Hacker able to upload his text on the website, as shown in screenshot taken by ‘The Hacker News’.
We contact hacker to know more about the hack, on asking How ? Hacker said,”I found a form on website, accepting file upload but without validating the extension, that allow me to upload a php shell on server”.
Original post at –thehackernews
Thanks for reading. hope it might helped you.