Personal information exposed in Aliexpress / Alibaba From modify to DB

During my preparation to the art exhibition in NEVE SHA'ANAN TLV LIGHT FEST I had to buy RGB floodlights, so I went to Aliexpress which is part of Alibaba group.

Very fast I've realized that's my shipping address, exposed in the internet as well as many other clients, all of them.


Step by step,now you can't do it...:

1.http://trade.aliexpress.com/order_list.htm
Shipping address
2.http://trade.aliexpress.com/mailingaddress/mailingAddressList.htm
Modify
3.http://trade.aliexpress.com/mailingaddress/mailingAddress.htm?mailingAddressId=105*******

Media:

TV

http://news.nana10.co.il/Article/?ArticleID=1096596

Others

http://thehackernews.com/2014/12/aliexpress-website-vulnerability_7.html
http://www.theregister.co.uk/2014/12/09/aliexpress_patches_mass_account_harvesting_flaw/

http://www.mako.co.il/nexter-internet/Article-e45fd3cc6192a41006.htm

http://www.themarker.com/technation/1.2506536

http://www.geektime.co.il/aliexpress-easily-hacked/

http://www.pc.co.il/featured/172457/

https://clasama.wordpress.com/tag/aliexpress/
https://twitter.com/TutMirLeid/status/541926717485776896
https://www.facebook.com/Columbuzz/posts/1576926002543900


Exra rweading:

http://www.prnewswire.com/news-releases/global-online-marketplace-aliexpress-now-accepting-webmoney-215626561.html By Theregister