Error message revealed a database file location, which could be downloaded.
Reported:
Occurred:
06 September 2000
Classifications:
- Attack Method: Abuse of Functionality
- Country: USA
- Outcome: Leakage of Information
E-mail addresses of other customers displayed by mistake, no hacking was required
References:
Reported:
Occurred:
13 September 2000
Classifications:
- Attack Method: Credential/Session Prediction
- Outcome: Leakage of Information
View other customers orders by changing a sequential number within a URL parameter
References:
This work is licensed under the Creative Commons Attribution License. To view a copy of this license, visit http://creativecommons.org/licenses/by/2.5/ or send a letter to Creative Commons, 559 Nathan Abbott Way, Stanford, California 94305, USA.
