We Love Cambodia, but…

We have found more data leak vulnerability in the current Cambodia e-Visa website (http://evisa.mfaic.gov.kh), including:

1. Paypal has blocked Cambodia e-Visa and is no longer their payment gateway provider. This is a sign of excessive chargeback and account in dispute. They have subscribed to a Singapore based payment company now.

2. On error page, the website returns other applicant’s email address in the online form.

3. The system wrongly charge 5USD instead of 25USD. Apparently, the payment integration is in a mess now.

4. The multi-lingual page on the system was not done properly.

We wish all visitors to this website to stop using current e-Visa (http://evisa.mfaic.gov.kh or http://www.mfaic.gov.kh).

From jpatokal: Re: the Xinhua story on sites being blacklisted for “fake visa information”, two of them appear to be not fake sites at all, but sites run by the original e-Visa operator who was kicked out under murky circumstances and now whines about it all over the net: 1) http://www.cambodiaevisa.com 2) http://www.welovecambodia.com

From Jamamni: The so-called official website claimed by Ministry of Foreign Affairs of Cambodia (www.mfaic.gov.kh & evisa.mfaic.gov.kh) are obviously an ASP-coded version imitating the original PHP-coded version of Cambodia e-Visa website, now hosted under www.cambodiaonarrival.com. From a programmer point of view, this is a case of infringement where government trying to kick out the original team and therefore an injunction against TY Thong, Adrian Phang and Hong Pangharith was file in Malaysia.

Tell your friend. Stop applying Cambodia e-Visa!