null – The open security community n|u

ideacellular.com SQL Injection Vulnerability

// May 10th, 2009 // Disclosures

The corporate login option on Idea cellular website was vulnerable to SQL injection attack. It was reported to ideacellular staff on 17th March 2009 and fixed on 23rd March 2009. They had initially informed us that it will take them around 8 days to fix it, surprisingly they fixed it in 7 , does it actually take that much time .

For detailed information click here to download pdf.