Saturday, November 12, 2011

Serious Security Flaw at Cleverbuy

I logged in to Cleverbuy to review the terms of some vouchers I bought. I clicked My Account and got the following screens:

security flaw at Cleverbuy
security flaw at Cleverbuy
security flaw at Cleverbuy

The thing is, I am not Anthea Gabriel. I don't know who she is nor was I trying to hack her account. But there I was, looking at her full name, order list, address, email, and phone number. I could use her info for mischief. I could also change her address and password if I wanted to. Hello identity theft!

I quickly reported the bug to Cleverbuy's Facebook page. In fairness to Cleverbuy, they promptly replied and promised to fix the error.

I just hope they really do fix this security bug because it's a serious error. If a legitimate client can access another client's account without even intending to or trying, then how much easier would it be for a malicious hacker?



Update: If you got here because you're concerned about Cleverbuy being a scam, head to my more recent Cleverbuy post. That's where I post updates I get about this issue.

If You Still Have an Unclaimed Cleverbuy Voucher, Read This!

 

 

13 comments:

  1. I have also purchased a voucher from Cleverbuys for a Bohol Tour via JT Discount Travel Agency in Makati.. My God! It was and still my worst nightmare..The travel agency according to them had issue with the airlines and that they have to hold almost if not all vouchers affecting customers booked on a particular date for the tour. At first I thought, the travel agency's system had the worst customer service- imagine no one will even bother calling you to check on your status after yo have declared the date of travel?! You had to call them and when you do, their phone numbers are not working! Then, will think they are "scammers"due to false advertisements; Speaking of "scammers", I had to call Cleverbuys- for the several time to follow-up on my forever pending voucher and they-Cleverbuy's customer service representatives just will tell you, "we will call you for any updates" and believe me, no one will! You literally have to do the follow-up always and adjust to any trip and date available just for you not to waste the time, expectations set and money's worth instead of they-Cleverbuys adjusting and making both ends met for the customer and their agency/company.Unfortunately, up until now i have not used my voucher and God knows if i will be able to make use of it. By far, it has been close to 2 months since I purchased a 27K worth of voucher, another dilemma I am having is if it is taking 2 months for me to get a hold of my supposedly trip, what more when I cancel my voucher?! Maybe it would take 2x? 4 months to credit back the money from my credit card?! Cleverbuys also has this modis of the first option is to convert the money/voucher bought to points in your account for you to use with their other promotions, meaning you will have to deal with them again- Hello?! The nerve of them to do that when they can not even comply to what they are promoting! Moving forward, please take precaution not to deal with Cleverbuys and JT Discount Travel Agency, if you do not want to experience the worst customer service and false advertisement like I did!

    ReplyDelete
    Replies
    1. Shucks I bought Bohol vouchers from them too and we haven't used them yet. T_T

      Delete
  2. Hi I just had the same exact experience 2 months ago and I decided to just refund vouchers I bought and yes until now no feedback from them. It is so frustrating dealing with both Clever Buy and J2 Discount Travel & Tours. Worst customer service ever!

    ReplyDelete
  3. Just to share, this was posted, i think, last May 14: http://thepromoblogger.com/cleverbuy-and-j2-discount-travel-updates/

    ReplyDelete
    Replies
    1. Oh no, I was looking forward to take the trip this November. Thanks for the link ACYang. Cleverbuy should have been the one to initiate refunds instead of waiting for customers to come to them.

      Delete
  4. I think cleverbuy is closing down we were there yesterday and around at least 50 people are there all complainantas asking for refund which they never gave !! We are so many who witnessed this so really its a scam better start claiming your refunds while may tao pa sanofc nila as they even hve a hearing with compalinants on june sa nbi ! All people na kausap namen dati apparently resigned effective the followingday ang mahahabol nyo na lan is a certain edgardo garcia na nagala cj corona pa non na hyp

    ReplyDelete
  5. Naku pano kaya 2 problem k din po 3 vouchers for trip 2 bora na-purchased ko pero one pa lng naprint ko kc ung 2 vouchers na pinadala nila blank nman ung voucher code n I'd code then wala ding naka indicate na name ko pano ko kaya marrefund to help nman po...

    ReplyDelete
  6. Bakit nman cila ganon hndi cla maghanap buhay ng tama kelangan pa nilang manloko ng kapwa.ang hirap kya kitain ng pera tapos ganyan lng gagawin nila..

    ReplyDelete
  7. I just went to their office in Marvin Plaza this afternoon around 12:30pm, and surprisingly there's a notice in the building that since Tuesday May 29, 2012 they abandoned their office already. I was there to file for refund of the 2 vouchers I purchased for Coron Tour for a total amount of P 35,800.00. We are more than 10 persons there that having a problem with cleverbuy. According to the guard there are a lot of complainants went there already with the same issues, when I checked the list it's really a lot, since yesterday it's more than 50 persons already. This is really disappointing and they are disgusting. I heard that this June they have a hearing in NBI.

    ReplyDelete
  8. It's true, the Cleverbuy office is now closed (temporarily daw).

    http://www.unsugarcoatedreviews.com/2012/05/if-you-still-have-unclaimed-cleverbuy.html

    ReplyDelete
  9. Good morning! I am also one of the victims of cleverbuy. It's been 1 month since I requested a refund and until now I don't get any feedback from them. It's only now I learned that cleverbuy is already closed. To all the victims of the scam of cleverbuy, let's help one another to file a case against them. We need to get our refund.

    ReplyDelete
  10. but i heard they will open daw! how true kaya? But Mr. Edgardo Garcia the J2 President and Cleverbuy Marketing Inc. Do you have his number please help.

    ReplyDelete
    Replies
    1. They're supposed to be "temporarily" closed only. J2 was supposed to reopen last May 21 but that didn't happen so don't keep your hopes up about Cleverbuy :(

      Delete
Related Posts Plugin for WordPress, Blogger...