The official website of Magadh University has reportedly been exposed to a serious cybersecurity flaw, potentially endangering extensive data belonging to students. Independent cybersecurity researcher Mayank Kumar asserts that this issue could jeopardise up to 2 terabytes of sensitive information, which includes personal details such as names, addresses, and Aadhaar numbers.

Kumar emphasises that the university is associated with 39 colleges, including 19 constituent colleges, thus amplifying the risk for a significant number of students. He explains that if this information were compromised, various malicious activities could ensue, including identity theft and financial fraud affecting not only the students but also their families.

The researcher has informed India’s national cybersecurity agency, CERT-in, about the vulnerability, and communicated directly with Magadh University officials. However, he mentions that he has not yet received a response from either entity regarding the matter.

Details of the Security Vulnerability

Kumar has identified the primary issue as a SQL injection vulnerability within the Magadh University website. This security loophole permits unauthorised individuals to access and potentially manipulate information stored on the university’s servers.

By employing SQL codes, an attacker could gain entry into the database linked to the university’s website. This means they could view, copy, modify, or even erase critical data such as academic records, marksheets, Aadhaar card details, and other personal information tied to campuses throughout the state.

Kumar estimates that the amount of exposed data could reach up to 2 terabytes. He has indicated that exploiting this vulnerability could lead to substantial repercussions, potentially impacting not just students, but also their families.

Implications of Data Breach

Kumar underscores that the implications of such a data breach could be devastating. The potential misuse of sensitive information might result in serious consequences like identity theft and the creation of forged documents. This situation could extend beyond the immediate student population, affecting numerous families associated with Magadh University.

The researcher has characterised this flaw as a fundamental yet critical oversight for an institution tasked with safeguarding sensitive personal data. Kumar highlights the importance of robust cybersecurity measures, especially in educational institutions that handle such vital information.

Recently, a similar vulnerability was discovered in the Bihar Mahadalit Vikas Mission website and was subsequently addressed. The identification of these security risks raises concerns about the broader implications of data security in public institutions in the state.

Long or Short, get news the way you like. No ads. No redirections. Download Newspin and Stay Alert, The CSR Journal Mobile app, for fast, crisp, clean updates!

App Store –  https://apps.apple.com/in/app/newspin/id6746449540 

Google Play Store – https://play.google.com/store/apps/details?id=com.inventifweb.newspin&pcampaignid=web_share