Full Disclosure mailing list archives

webubs.com and prioritymeter.com; multiple security issues


From: warning () type-error net
Date: Tue, 20 Nov 2012 15:27:51 -0800

webubs.com and prioritymeter.com are utility billing service companies.
They do not take security seriously. Then have hundreds of thousands of
customers. All their customer data is exposed to anyone that logs into the
portal via numerous site security flaws such as: Direct Object Reference
(see someone else's billing data), Account Hijacking (log into anyone's
account without knowing their password), and much more! Maybe they take
security more seriously in the future after they get breached a few more
times?

#warning
_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/

Current thread: