eBay vulnerability put millions of user at risk

  •  
  •  
  •  
  •  
  •  
  •  
  •  
  •  

eBay an American multinational corporation and e-commerce company has patched a XSS security vulnerability which exposed millions of user at risk of phishing attack.

Even though this flaw was privately notified to eBay a month ago, no act was taken until the matter got the attention of the media.

Short YouTube video on how the XSS security vulnerability works.

Using the method mentioned above in the video can allow attackers easily steal usernames and passwords, since many people use the same details, it could have resulted in heavy data loss.

According to security researcher, This was a simple vulnerability which would have allowed the attacker to use iframe to insert their own malicious page into eBay.”

Now the vulnerability is patched.

The following two tabs change content below.

William Fieldhouse

I currently work full time as a penetration tester and have been involved within the IT security industry for over a decade. I also love to pioneer any forms of new technology and ideologies for future advancements. Feel free to contact me at [email protected]

William Fieldhouse

I currently work full time as a penetration tester and have been involved within the IT security industry for over a decade. I also love to pioneer any forms of new technology and ideologies for future advancements. Feel free to contact me at [email protected]

Leave a Reply