Affected Entity: Servipag Chile

Actions: Tweet

Main URI: https://www.servipag.com
Type: Data Leak
Exploitable URI: https://www.servipag.com/browse.asp?pagina=web/fin_pago2.htm&Tx=68014206&Popup=NO
Status: Fixed
Date: Aug. 26, 2011, 11:21 p.m.
Comments:
You can manipulate the "TX" variable increasing it one by one to leak user info.