Tag Archives: fail

Wateen Allows Access without password to Its Customers’ Account info

Wateen Telecom offering Self Care portal, through it, wateen offering its customers to know their latest account status along with a facility to recharge their accounts, but the heighlited thing is that system login to user information page without asking any password or any system generated user name; instead all customer’s private information is revealed by just submitting random names.

Here on this url: http://58.27.179.144/selfcare simply guess and enter names like: umer, hamza, Aamir, Huma, Nadia,hina etc.

P.S. You don’t need to be a Wateen customer to enjoy personal information of Wateen users;

Below is screen shot of a random customer, interestingly there is a sign out button for a page which never asked for sign-in.

Related Posts with Thumbnails
Share