eBay an American multinational corporation and e-commerce company has patched a XSS security vulnerability which exposed millions of user at risk of phishing attack.
Even though this flaw was privately notified to eBay a month ago, no act was taken until the matter got the attention of the media.
Short YouTube video on how the XSS security vulnerability works.
Using the method mentioned above in the video can allow attackers easily steal usernames and passwords, since many people use the same details, it could have resulted in heavy data loss.
According to security researcher, This was a simple vulnerability which would have allowed the attacker to use iframe to insert their own malicious page into eBay.”
Now the vulnerability is patched.
Latest posts by William Fieldhouse (see all)
- A John McAfee-Backed ICO Exposed Thousands of Peoples Documents Due to Security Blunder - April 26, 2018
- Latest Hacking News Podcast #13 - April 17, 2018
- Latest Hacking News Podcast #12 - April 16, 2018