Idea Cellular suffered from a SQL injection vulnerability.
58db50ea20a4e0d8945ec934cad0bb3336aad9c5172ea8e6a05907837d051921
Hi,
Organization
-------------------
http://ideacellular.com
Idea Cellular, Aditya Birla Group
It is one of the major telecom companies in India.
Problem
-------------
Sql injection in Corporate Account Login
Dates
--------------
Reported: 17th March 2009
Fixed: 23rd March 2009
Credits
----------
Aseem Jakhar - Member NULL security community
http://null.co.in
Problem Description
-----------------------------
There was a sql injection vulnerability in the corporate Account
login on the ideacellular.com website. They were doing client side
validation only, which could be easily bypassed. It could lead to
unauthorized access and database manipulation.
--
Cheers,
@
http://null.co.in