Online crime complaints hit record high in 2008

The FBI’s Internet Crime Complaint Center IC3 says complaints of online crime hit a record high in 2008, driven mostly by non-delivery of goods and service and those pesky 419 Nigerian e-mail scams. Accordign to a new report PDF from ic3.gov, the center received a a total of 275,284 complaints, a...

LedgerSMB < 1.2.8, SQL-Ledger 2.x Multiple SQL Injection Issues

Severity: Critical Effect: Compromise of FInancial Data, deletion of audit trails, alteration of system settings, disclosure of confidential information possible in some setups. Affected products: LedgerSMB 1.0.0-1.2.7 , SQL-Ledger 2.x all versions. 1: SQL injection issue in invoice quantity fiel...

XSS by setting img.src to javascript: URI — Mozilla

mozbugra4 reported that the src attribute of an IMG element loaded in a frame could be changed to a javascript: URI that was able to bypass the protections against cross-site script XSS injection. The injected script could steal credentials and financial data, or perform destructive actions on...