WHID 2004-9: Billing and personal information leakage due to lack of authentication on a phone company web site

Attack Information
WHID ID: 
2004-9
Attack Method: 
Attack Method: 
Outcome Information
Outcome: 

A billing information system required only phone number and zip code to pull up account details

Additional information: