Posté par: igor51 le décembre 06, 2013, 10:58:20
According to a News Limited report, customers visiting clothing retailer Witchery's mobile website were able to get at the PII of other users via a feature called "track my order."
Customers could also view every order currently being processed, not just their own...
Source: Online clothing store Witchery lets customers view - and edit! - each other's personal information (http://feedproxy.google.com/~r/nakedsecurity/~3/L_FDiq5zsDk/)