Privacy issues in metor.com

Discussion in 'privacy problems' started by Paul Wilders, Apr 2, 2002.

Thread Status:
Not open for further replies.
  1. Paul Wilders

    Paul Wilders Administrator

    Joined:
    Jul 1, 2001
    Posts:
    12,472
    Location:
    The Netherlands
    Summary

    A privacy issue has been found in metor.com, a search engine. The privacy issue allows attackers to reveal the query string and its results that were used by a previous user.



    Details
    Example:
    Click on any of the below URLs:

    www.metor.com/[91CB-0154-21F0]/se/results

    Or:
    www.metor.com/[91DE-056F-8A93]/se/results

    Will reveal the query and the results that were conducted by a previous user.

    ------

    source: securiteam.com
     
Loading...
Thread Status:
Not open for further replies.