TripAdvisor Hotels Restaurants - Dangerous filesystem permissions, WebView SSL handling enabled, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application TripAdvisor Hotels Restaurants published at the 'play' market has multiple vulnerabilities...

Over 1000 Wendy's Restaurants Hit by Credit Card Hackers

The Popular fast-food restaurant chain Wendy's on Thursday admitted that a massive cyber attack had hit more than 1,000 of its restaurants across the country. The burger chain did not speculate how many people may have been affected, though it did confirm that the hackers were able to steal its...

Wendy's Comes Clean On Data Breach

Fast-food chain Wendy’s disclosed it was a victim of a point-of-sale system attack that installed malware on PoS computers affecting 300 franchise restaurants. The disclosure was part the company’s first quarter 2016 SEC filings on Wednesday and is the most complete account to date of a 2015 data...

lagrange-restaurants.com XSS vulnerability

Vulnerable URL: http://www.lagrange-restaurants.com/search.htm?term=%22%3E%3Csvg/onload=prompt%28/XSSPOSED/%29%3E Details: Description| Value ---|--- Patched:| Yes, at 23.11.2017 Latest check for patch:| 23.11.2017 20:33 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa...

Remote Access Hack Compromises POS Vendor

A popular point of sale vendor may have suffered a data breach earlier this year that could affect customers of a handful of Pacific Northwest restaurants. Vancouver, Wash.-based Information Systems & Supplies, a supplier of POS systems to restaurants such as Dairy Queen, Buffalo Wild Wings and...

Romanian POS Hackers Plead Guilty, Net $10 M from Scam

Two Romanian men pled guilty this week to charges they hacked into the point of sale systems of more than 200 restaurants, compromising the payment cards of 146,000 customers and amassing more than $10 million over the last few years. Included in those 200 stores were more than 150 Subway sandwic...

Restaurant Depot Admits They Were Hacked, Customer Data Stolen

A hack has the Restaurant wholesale chain Restaurant Depot in hot water, after thieves compromised the firm’s credit card processing systems and made off with customer information, including credit card numbers. One published report claims as many as 100,000 individuals may have been victims of t...

Romanian Men Indicting For Hacking 150 Subway Restaurants

Four Romanian nationals were charged with hacking into the credit card processing systems of some 150 Subway sandwich shops and those of 50 other unnamed retailers, according to a copy of the indictment PDF. The four men and two co-conspirators, identified by their online pseudonyms,...

Reality TV Show X-Factor Spills Data On 250,000 Hopefuls

Reality TV hopefuls are prepared to bare all for a chance at insta-celebrity. But prospective contestants for the new Simon Cowell show X-Factor probably didn’t expect that their names, e-mail addresses and phone numbers to be up for grabs. Alas, that’s how it turned out after a network breach at...

CVE-2006-6269

Multiple SQL injection vulnerabilities in Infinitytechs Restaurants CM allow remote attackers to execute arbitrary SQL commands via 1 the id parameter in rating.asp, 2 the mealid parameter in mealrest.asp, and 3 the resid parameter in resdetails.asp...

CVE-2006-6269

Multiple SQL injection vulnerabilities in Infinitytechs Restaurants CM allow remote attackers to execute arbitrary SQL commands via 1 the id parameter in rating.asp, 2 the mealid parameter in mealrest.asp, and 3 the resid parameter in resdetails.asp...

CVE-2006-6269

Multiple SQL injection vulnerabilities in Infinitytechs Restaurants CM allow remote attackers to execute arbitrary SQL commands via 1 the id parameter in rating.asp, 2 the mealid parameter in mealrest.asp, and 3 the resid parameter in resdetails.asp...

CVE-2006-6269

Infinitytechs Restaurants CM is affected by SQL injection in three parameters: id (rating.asp), mealid (meal_rest.asp), and resid (res_details.asp). The underlying issue is improper handling of input in SQL queries, enabling remote attackers to craft arbitrary SQL commands. The CVE entry notes a ...

infinsql.txt

product:Infinitytechs Restaurants CM bug:injection sql risk:medium injection sql: /rating.asp?id='sql /mealrest.asp?mealid='sql /resdetails.asp?resid='sql laurent gaffié & benjamin mossé http://s-a-p.ca/ contact: [email protected]...

Infinitytechs Restaurants CM

product:Infinitytechs Restaurants CM bug:injection sql risk:medium injection sql: /rating.asp?id='sql /mealrest.asp?mealid='sql /resdetails.asp?resid='sql laurent gaffie & benjamin mosse http://s-a-p.ca/ contact: [email protected]...