a vulnerability in airasia.com database

last night while lying on my bed staring at the ceiling and killing some lizard, a friend buzz me on ym. he told me to go to a link he gave. when i clicked, it shows me a detailed information about airasia.com database. it even shows the username, password and database name. the php script used to get the information was very simple. just by implementing the script into the website, we can get many information like customer name, address and even credit card numbers. how a big company like air asia don’t fully secure their server. this could endanger their database and of course, the customer information. probably their it department should read more about security. shit dude, i was thinking, there was nothing secure in this world. there are probably some pervert looking at me taking a dump every morning using a satellite. who knows?

Leave a Reply

Your email address will not be published. Required fields are marked *