Wateen Allows Access without password to Its Customers’ Account info
Wateen Telecom offering Self Care portal, through it, wateen offering its customers to know their latest account status along with a facility to recharge their accounts, but the heighlited thing is that system login to user information page without asking any password or any system generated user name; instead all customer’s private information is revealed by just submitting random names.
Here on this url: http://126.96.36.199/selfcare simply guess and enter names like: umer, hamza, Aamir, Huma, Nadia,hina etc.
P.S. You don’t need to be a Wateen customer to enjoy personal information of Wateen users;
Below is screen shot of a random customer, interestingly there is a sign out button for a page which never asked for sign-in.