Stealing passwords from McDonald's usersStealing passwords from McDonald's usersPosted on 6 January 2017 by Tijme Gommers. By abusing an insecure cryptographic storage vulnerability and a reflected server cross-site-scripting vulnerability it is possible to steal and decrypt the password from a McDonald’s user. Besides that, other personal details like the user’s name, address & contact details can be stolen too. Proof of ConceptReflect
