Website flaw exposed a Canadian ISP’s entire customer database

Canadian internet provider Altima Telecom has fixed a flaw in its website that could have given an attacker full access to its customer database. The customer database was connected to the company’s website, but could be remotely accessed with a blind SQL injection attack. Daley Borda, founder of Underdog Security, found the bug and reported […] https://ift.tt/2xRuLPA support@endlesssupplies.ca (Endless Supplies .Ca) October 01, 2018 at 11:04AM