Dusseldorf airport closes security holes

[J65nko]

From http://h-online.com/-1415780

According to an advisory in the Vulnerability Lab vulnerability database, Dusseldorf airport closed potentially critical security holes in several areas of its web site in December. A database extract available to The H's associates at heise Security says that the SQL injection holes potentially allowed unauthorised access to the entire database, which contains personal data and passwords of passengers and partners, as well as Airliner Lounge data that is normally only available to airline employees.

[Carpetsmoker]

According to Vulnerability Lab, it was also possible to access credit card data, passenger lists and even the server's root password.

omg wut?!