Topcashback problem

antijoke · 3 Mar 2017 at 09:44

Anyone else here a member?

I just went to login into my account and there was a random email address in the members login email field.

If I hit refresh I get a new email address.....oh ****!

I can also login as that person

https://www.topcashback.co.uk/logon?PageRequested=https://www.topcashback.co.uk/Home

That's the link I used, I get someones email and if I hit my account at the top I get their details.

Edit: I was able to view their details by simply having their email address in the login field and then hitting account at the top.

Kemik · 3 Mar 2017 at 09:49

What browser are you using? I can't duplicate on Chrome.

Submit a support ticket here: https://www.topcashback.co.uk/help/54

antijoke · 3 Mar 2017 at 09:49

Could a mod edit the title, to add problem to the title

I'm using Chrome, I can literally cycle through all the accounts listed and then just click account and see all their transactions

Gambisk · 3 Mar 2017 at 10:06

just noticed it too, but I cant replicate.

edit: now it is happening again

Sui · 3 Mar 2017 at 11:50

This is still happening, what a shocking security flaw

Semple · 3 Mar 2017 at 12:00

Not doing it for me!

Sui · 3 Mar 2017 at 12:09

Semple said:
Not doing it for me!

It's not on my work PC on chrome, but it is in Safari on my iPhone if I use the desktop site