List of Web Hacking Incidents: Weak Password Recovery Validation

To further analyze the Web Hacking Incident Database, use the WHID query page

Attack Method Outcome
WHID 2006-14: Forgotten password clues create hacker risk Weak Password Recovery Validation Disclosure Only
WHID 2005-5: Paris Hilton's T-Mobile online account hacked
Insufficient Authentication
Weak Password Recovery Validation
OS Commanding
WHID 2005-32: Weak password recovery on Citrix's site Weak Password Recovery Validation Disclosure Only
WHID 2003-3: User passwords could be stolid in Microsoft's Passport service Weak Password Recovery Validation Disclosure Only