MySQL.com hacked via... SQL injection vuln

22/06/2011 15:42

 MySQL.com was hacked over the weekend via an attack which used a blind SQL injection exploit to pull off the pawnage.

Hackers extracted usernames and password hashes from the site, which were subsequently posted to pastebin.com. Any easy to guess login credentials could be easily extracted from this data using rainbow tables to match dictionary passwords to their hash values.

[...]

Article: http://www.theregister.co.uk/2011/03/28/mysql_hack/