Friday, 29. November 2002

Victoria’s Secret customers exposed


THE GLITCH STRUCK a feature at Victoriassecret.com that allows customers to check the status of their orders. Before that feature was turned off on Friday, the unique number assigned to each customer was revealed in the Web browser’s address Window. A browser could simply change the customer number, and in some cases, pull up another customer’s orders.

¬> msnbc

... Comment