View other customers orders by changing a guessable number within a URL parameter
Date:
29 November 2002
Incident Type: Security Breach
WASC Threat Classification: Unknown
A company put its earnings report on site before its official release, but did not linked to it. Reuters found the document and published it.
References:
Date:
21 September 2002
Incident Type: Security Breach
WASC Threat Classification: Insufficient Authorization, Predictable Resource Location
References:
Date:
09 July 2002
Incident Type: Vulnerability Disclosure
WASC Threat Classification: Credential/Session Prediction
Opening an account with a discontinued e-mail address exposes all the information of the discontinues account
References:
This work is licensed under the Creative Commons Attribution License. To view a copy of this license, visit http://creativecommons.org/licenses/by/2.5/ or send a letter to Creative Commons, 559 Nathan Abbott Way, Stanford, California 94305, USA.
