Server Leaks Personal Information

[kreykh]

http://www.unitedresources.biz/sail/sailcalendar.aspx
This site if browse manually to their Calendar of Events page and provide a random ID/Password, than click on My Info leaks badly  the real members' info, including Home Addresses, CC (partial), Phones, etc Very buggy server...Likely, I did accidentally exploit the  Session or Cookie prediction flaw.. .
P.S. The link above might not work directly. You need to go http://www.sailthesounds.com/Training.htm and Click on "Enroll in Class".. 

[SysAdMini]

I suggest contacting site owner.

https://www.unitedresources.biz/ContactUs.aspx