Accounts with no billing information (1995)
Discovered By:
Happy Hardcore
Date:
August 1995
Patched:
Various instances of this exploit have been discovered throughout the past
5 years but the particular method Hardcore used was patched in 1996
Using a form capture( Mac version of a PC .amp file) of different parts of
the new account sign up process, Happy Hardcore was able to bypass the
billing window completely. At the time the sign up tokens did not have
conditional statements which prevents one from moving along in the sign up
process before entering in some sort of billing information. Therefore
accounts could be created with no billing information at all.
Contributed By:
O0O
Corrections: keith
|