Security Hole: Nowcasting.com
Not sure how many of you are familiar with the actor resource site nowcasting.com but if you are, then you’ll remember that last year sometime they re-designed their website, which changed it from an open to the public website to a members only website.
Before this change was made it was easy to search through their database of actors / actresses, but now the only way to do that is to sign up for a membership, or is it ?
Try out the following link
http://www.nowcasting.com/search/
Hmm… it seems that nowcasting.com has failed to protect this page and it appears to be wide open, still allowing you to search through their entire actor database and view their contact information, such as e-mail, phone, agent, etc…
I’ve made nowcasting.com aware of this security hole almost immediately after I’ve discovered it some months back, they were very surprised / angry to say the least, however I have not seen them do anything to try and rectify the situation.
Similar Posts:
- Easy PHP Guestbook Part 4 – Submitting to the Database
- Easy PHP Guestbook Part 5 – Retrieving from the Database
- Easy PHP Guestbook Part 2 – The Database
- So Long Paypal…
- What To Do If OSx360 Fails Verification
