Kruczek and Szczurowski found several bugs in the widely used content management system Pad CMS, which website owners use to organize and display content.
The two found critical vulnerabilities in one web system called Pad CMS, which allowed them to easily access over 300 public websites without needing a password. The software developer did not patch the software because it had become “end of life” and was no longer supported.
Another bug allowed them to gain access to the websites of some two-thirds of Poland’s judiciary, or about 245 courts, they said.
The duo reported their findings to the government through various official channels.
The researchers said during their talk that it was ultimately worth the hassle, saying that as a result we are “a little bit more safe.”
Discover more from NAIRAVOICE.COM.NG
Subscribe to get the latest posts sent to your email.

