Paul Wilders
April 2nd, 2002, 06:31 AM
Summary
A privacy issue has been found in metor.com, a search engine. The privacy issue allows attackers to reveal the query string and its results that were used by a previous user.
Details
Example:
Click on any of the below URLs:
www.metor.com/[91CB-0154-21F0]/se/results
Or:
www.metor.com/[91DE-056F-8A93]/se/results
Will reveal the query and the results that were conducted by a previous user.
------
source: securiteam.com
A privacy issue has been found in metor.com, a search engine. The privacy issue allows attackers to reveal the query string and its results that were used by a previous user.
Details
Example:
Click on any of the below URLs:
www.metor.com/[91CB-0154-21F0]/se/results
Or:
www.metor.com/[91DE-056F-8A93]/se/results
Will reveal the query and the results that were conducted by a previous user.
------
source: securiteam.com