|  |  | 

Latest Vulnerabilities Windows

Microsoft Azure Web Site Portal (azurewebsites.net) Elmah Logs Show Database Details Can Be Used for Hacking Database?

img-responsive

According to Alexa statistics, it is very popular and the websites belonging to Microsoft, present a serious information gap due using elmah.axd in public.

azurewebsites.net

Link : http://bonusround.azurewebsites.net/elmah.axd/detail?id=918DCD19-3BCC-4AB6-8B91-DE30BEF8751C

Domain Name: azurewebsites.net
Registry Domain ID: 1698514482_DOMAIN_NET-VRSNRegistry Registrant ID:
Registrant Name: Domain Administrator
Registrant Organization: Microsoft Corporation

Error logs that show database details with table and field definitions:

System.Data.SqlClient.SqlExceptionThe INSERT statement conflicted with the FOREIGN KEY constraint “FK_Coupons_BusinessLocations”. The conflict occurred in database “bonusround”, table “br.BusinessLocations”, column ‘Id’. The statement has been terminated.

 

 

microsoft-azure-web-site-portal-azurewebsites-net-elmah-logs-show-database-details-can-be-used-for-hacking-database

ABOUT THE AUTHOR

Application Security , Information and Software Security Specialist Ethical Hacker and Pentester

POST YOUR COMMENTS