Security vulnerability on SABC TV Licence website lets attackers see and change profile data

[Jan]

Major SABC TV Licence security flaw — profiles can be changed and addresses exposed

The SABC’s TV Licence web portal has a security vulnerability that allows attackers to access people’s accounts without knowing their passwords.

An attacker can see TV Licence holders’ outstanding bills, download an account statement, and view and change any address details on file.

 

[kissingmybbgoodbye]

I tried one way, could not change details, but could see outstanding amount.

Login

paynow.tvlic.co.za

Maybe a bit more digging I can change details, but definitely looks like there are no security mechanisms in place. Probably paid someone millions to develop the system.

Didn't try it, but this seems dodgy and plain stupid

Change Cellphone Number

paynow.tvlic.co.za

Can see that my domestic worker has an out standing balance of

7890.50​

 

[TEXTILE GUY]

Looks like mine

Just checking ................. no payments made ................ no?

Yep, must be mine .......

 

[rh1]

I see my wife still pays the licence fee even though we dont watch any terrestial tv.

 

[Gazg]

I tried one way, could not change details, but could see outstanding amount.

Login

paynow.tvlic.co.za

Maybe a bit more digging I can change details, but definitely looks like there are no security mechanisms in place. Probably paid someone millions to develop the system.

Didn't try it, but this seems dodgy and plain stupid

Change Cellphone Number

paynow.tvlic.co.za

Can see that my domestic worker has an out standing balance of

7890.50​

That's like triple of mine........I wonder if she gets phoned as much as I do?

 

[RonSwanson]

I see my wife still pays the licence fee even though we dont watch any terrestial tv.

View attachment 1350552

A good woman always has your back, regardless. Kudos.

 

[gregmcc]

Wow - this is shocking. Found a id number generator and 2nd ID number I tried I was able to get a balance.

Someone hasn't been paying

Outstanding balance: R 9774.00​

 

[RonSwanson]

Wow - this is shocking. Found a id number generator and 2nd ID number I tried I was able to get a balance.

Someone hasn't been paying

Outstanding balance: R 9774.00​

What a CNUT, expose him. Everyone knows that TV Licenses are far more important than taxes, they are for all the AA and BBBEEE cadres, it's for a good BEE cause, that's why we all pay them.

 

[now05ster]

I see my wife still pays the licence fee even though we dont watch any terrestial tv.

View attachment 1350552

What the heck, hope you give her a good talking to. She's wasting good money.

 

[j4ck455]

Can all the postal addresses be changed to the SABC's postal address?

Maybe contact details as well (the SABC fax number).

 

[CapoPlays]

Wow - this is shocking. Found a id number generator and 2nd ID number I tried I was able to get a balance.

Someone hasn't been paying

Outstanding balance: R 9774.00​

this is bad , with a id generator SABC TV Licence Portal allows you to view customers names and amount due . although I can only make payment and log out , who's going to be the hero to make payments for these people lmao

 

[Guest 290922]

Quickly delete your account. They will never know. jk. jk.

 

[obsidian86]

Wow - this is shocking. Found a id number generator and 2nd ID number I tried I was able to get a balance.

Someone hasn't been paying

Outstanding balance: R 9774.00​

You can also use an ID number to see where someone is registered to vote

 

[rh1]

What the heck, hope you give her a good talking to. She's wasting good money.

She is still upset at me, for not paying for etolls whilst we were in JHB.

 

[Kelerei]

Well, I'm pleasantly surprised: seems like the SABC actually cancelled my TV License back in 2018 when I buggered off!

 

[Petec]

Pay your TV licence, people. It's the right thing to do!

 

[Nobody Important]

Major SABC TV Licence security flaw — profiles can be changed and addresses exposed

The SABC’s TV Licence web portal has a security vulnerability that allows attackers to access people’s accounts without knowing their passwords.

An attacker can see TV Licence holders’ outstanding bills, download an account statement, and view and change any address details on file.

I blame @Pineapple Smurf.

 

[TEXTILE GUY]

Heartbroken ............................................................................................... not.

 

[ToxicBunny]

Well, I'm pleasantly surprised: seems like the SABC actually cancelled my TV License back in 2018 when I buggered off!

Lucky bugger... You found someone who actually did their job.

 

[McGuywer]

Just post some paid up TV licence numbers, so that we can buy TVs hassle free.