Vakow is up for hacks

Vakow‘s admin site is up for hacks and the access is controlled by the default password any cms tool/DB ships with (I don’t want to disclose that, but you are free to make a wild guess!).

Have a look at the hacked admin screenshot below:

vakow hack

From the hacked site, I can of course delete the site, delete any user, grab user’s mobile number and any goddamn data that I want to. Too bad!

@RG – Fix it before my hand starts exploring the site :D

[Thanks to a reader (am not taking his name) for sending the plug]

 ,
  • Related Articles

    1. Vakow: The cool “SMS forward” engine!
    2. Exclusive: Vakow goes viral with Orkut integration
    3. Hacking Google ChatBack widget
    4. Local Search Market in India : On the Boil!
    5. MocoDile: Send any document from your PC to any mobile in the world!
  • comment(s) on Vakow is up for hacks

    4 Responses to Vakow is up for hacks

    1. rg says:

      We’re feeling so goofy that we can’t tell. It was just stupid!

      The password was reset to root/root just a couple of days ago when we updated our database.

      Anyway, it has been ‘fixed’ now. Thankfully, there was no breach or ‘hacking’. Many thanks to Arpan who mailed us immediately.

      We have also explained the situation on our blog:
      http://blog.vakow.com/2008/03/05/feeling-so-goofy-that-we-cant-tell/

      Thank You

      Sincerely
      RG and Amitu

      As if startup life isnt difficult as it is!

    2. rg says:

      BTW, Vakow IS NOT UP FOR HACKS (anymore)

    3. Sri says:

      Howdy

      Isnt that the standard django-admin site? Why is that even open to the public?

      Cheers
      S

    4. Raxit says:

      I would say Interesting !

      would impressed by RG’s open reply !

      Best luck To Hacker, Vakow & pluggd.in !

      -Raxit