Various sites of HBO-school InHolland have been taken offline after Friday night showed that they were predisposed for sql injections and there is even passwords of adminusers in plaintext from databases could be lifted.
Three sites of higher vocational school, InHolland proved susceptible to sql-injectie.De ict department of the school has pabo-inholland.nl, mkb-inholland.nl and inhollandtv.nl now taken offline. Through the latter url it proved to be possible a database approach in which seven user names with administrator rights were, including the passwords that are not stored encrypted. That claims at least GeenStijl, which is an e-mail with the information received.
InHollandtv is the media site of the school, where, among other videos are for students, teachers and companies. According to the alleged discoverers of the leaks, was made possible through the adminpanel after logging in, uploading of files, for which there is no restriction on file type would be. Also there would be the possibility exist to use a part of pabo.inholland.nl mails in the name of the school.
Pabo-inholland.nl does an old site which has now been replaced by www.leernetwerkeducatie.nl. Also that site is offline, which reported that on 28 november will be available again. The spokesman of InHolland was Saturday not accessible to questions about the offline pick of the sites and the hack to answer.