Shop online at Asda? Website vuln created account hijack risk

Walmart-owned store patches hole, but it was open for nearly 2 years

Updated Retailer Asda dragged its heels for nearly two years before finally this week tackling a set of security vulnerabilities reported to it by a UK consultant. Asda has acknowledged the flaws - which Paul Moore, who discovered them, argues offer up an account hijack risk - but played down their significance."