QuinStreet Database ID Spoofing

March 13, 2013 FULL-DISCLOSURE Exclusive - Vielen Dank John! VULNERABILITY SUMMARY --------------------- A confirmed security vulnerability has been identified with 30 high traffic web sites owned by QuinStreet. Vendor stores database IDs in cookies which are easily spoofed USERIDCOOKIE, allowing...