Mutt, the problem is that basically all the billing companies use (or used) almost identical scripts with similar holes in them.
AFAIK, the current Epoch, CCBill, Jettis and PSW scripts are pretty much secure now but if your friend still use an old version of the scripts, he can be in trouble. I can give you more details on this but as I said in the GFY thread, I don't usually discuss security problems in public.... Especially not with LF reading this board... <_<
|