Researchers found common points of failure, like software used to organize and display web content, could have allowed hackers to run riot through government websites.