I've discovered a huge flaw in the way vBookie events work that allow someone to vote on any events at odds of his own choosing.
The way to do this, which i discovered by chance, is trivial: make a copy of the form - and edit it to change the odds, which are written in the webpage and not checked after submission.
I thought you should know, because someone wanting to exploit it could do so incredibly easily.
Is there any thoughts as to how to fix this??? Much thanks.
|