Clan x86

Technical (Development, Security, etc.) => General Security Information => Topic started by: iago on December 05, 2007, 10:06:59 AM

Title: Passport Canada pwned by stupid Web app bug
Post by: iago on December 05, 2007, 10:06:59 AM
http://www.theglobeandmail.com/servlet/story/RTGAM.20071204.wpassport1204/BNStory/National/home

Basically, you go to displayApplication.php?user_id=xxx and change it to =yyy to see others' applications for new passports. Wtf!

They fixed the problem on Friday, and I submitted my application for a Canadian passport on Monday. That's starting to sound a little suspicious!