List: wasc-whid@lists.webappsec.org
From: WASC Web Hacking Incidents Database
WHID 2011-26: Tunisian government harvesting usernames and passwords
Wed, Jan 26, 2011 7:49 PM
WHID 2011-26: Tunisian government harvesting usernames and passwords
Entry Title: WHID 2011-26: Tunisian government harvesting usernames and
passwords
WHID ID: 2011-26
Date Occurred: January 4, 2011
Attack Method: Content Injection
Application Weakness: Insufficient Transport Layer Protection
Outcome: Stolen Credentials
Attacked Entity Field: Web 2.0
Attacked