Yahoo! Site Backups Stolen

A penetration tester has allegedly hacked Yahoo!, Claiming to have acquired access to the sites backup’s and database files.

The hacker using the handle Virus_Hima published screenshots showing off backups for Yahoo’s finance subdomain.

Virus_Hima claimed to have got at the databases via a reflected cross site scripting vulnerability which is reported that it has not been fixed by Yahoo!.  He also said he discovered a SQL Injection hole.

Virus_Hima disclosed the flaws allegingthat Yahoo! had ignored disclosure emails.

Virus_Hima has also claimed that he has “found tens of zero day vulnerabilities in big web sites such as Adobe, Microsoft, Yahoo!, Google, Apple, Facebook,” the hacker posted on Pastebin.