eBay Magento CE 1.9.2.1 - Unrestricted Cron Script (Code Execution Denial of Service)

eBay Magento CE 1.9.2.1 - Unrestricted Cron Script Code Execution Denial of Service Exploit Title: eBay Magento CE = 1.9.2.1 Unrestricted Cron Script Potential Code Execution / DoS Date: 06.11.2015 Exploit Author: Dawid Golunski Vendor Homepage: http://magento.com Version: eBay Magento CE = 1.9.2...

eBay Magento CE 1.9.2.1 - Unrestricted Cron Script (Code Execution / Denial of Service)

Exploit Title: eBay Magento CE = 1.9.2.1 Unrestricted Cron Script Potential Code Execution / DoS Date: 06.11.2015 Exploit Author: Dawid Golunski Vendor Homepage: http://magento.com Version: eBay Magento CE = 1.9.2.1 / Magento EE =1.14.2.1 Tested on: Linux Magento reference ID: APPSEC-1045...

developer.ebay.com Open Redirect vulnerability

Open Bug Bounty ID: OBB-99790 Description| Value ---|--- Affected Website:| developer.ebay.com Open Bug Bounty Program:| Not created yet Vulnerable Application:| Custom Code Vulnerability Type:| Open Redirect / CWE-601 CVSSv3 Score:| 3.4 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:N/I:L/A:N Remediation...

eBay Magento <= 1.9.2.1 - PHP FPM XML eXternal Entity Injection Vulnerability

Exploit for php platform in category web applications ============================================= - Release date: 29.10.2015 - Discovered by: Dawid Golunski - Severity: High/Critical - eBay Magento ref.: APPSEC-1045 ============================================= I. VULNERABILITY...

eBay Magento XXE Injection

============================================= - Release date: 29.10.2015 - Discovered by: Dawid Golunski - Severity: High/Critical - eBay Magento ref.: APPSEC-1045 ============================================= I. VULNERABILITY ------------------------- eBay Magento CE = 1.9.2.1 XML eXternal Entit...

eBay Magento 1.9.2.1 - PHP FPM XML eXternal Entity Injection

============================================= - Release date: 29.10.2015 - Discovered by: Dawid Golunski - Severity: High/Critical - eBay Magento ref.: APPSEC-1045 ============================================= I. VULNERABILITY ------------------------- eBay Magento CE = 1.9.2.1 XML eXternal Entit...

eBay Fixes XSS Flaw in Subdomain

There was a cross-site scripting vulnerability in an eBay domain that could have allowed an attacker to steal users’ session cookies and take over their accounts. The company has removed the vulnerable page, according to the researcher who discovered the bug and disclosed it to eBay, Aditya Sood...

PayPal Stored Cross Site Scripting

Document Title: =============== PayPal Bug Bounty 119 - Stored Cross Site Scripting Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1588 Video: http://www.vulnerability-lab.com/getcontent.php?id=1587 Vulnerability Magazine:...

Ebay Magento Cross Site Request Forgery

Document Title: =============== Ebay Inc Magento Bug Bounty 16 - CSRF Web Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1472 Ebay Inc Security ID: EIBBP-31808 Release Date: ============= 2015-07-02 Vulnerability Laboratory ID VL-ID:...

Ebay Inc Magento Bug Bounty #16 - CSRF Web Vulnerability

Document Title: =============== Ebay Inc Magento Bug Bounty 16 - CSRF Web Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1472 Ebay Inc Security ID: EIBBP-31808 Release Date: ============= 2015-07-02 Vulnerability Laboratory ID VL-ID:...

Ebay Magento Application-Side Cross Site Scripting

Document Title: =============== Ebay Magento Bug Bounty 14 - Persistent Description Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1463 EIBBP-31602 Release Date: ============= 2015-06-30 Vulnerability Laboratory ID VL-ID:...

Ebay Inc Magento Bug Bounty #16 - CSRF Web Vulnerability

Document Title: =============== Ebay Inc Magento Bug Bounty 16 - CSRF Web Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1472 Ebay Inc Security ID: EIBBP-31808 Release Date: ============= 2015-07-02 Vulnerability Laboratory ID VL-ID:...

Ebay Magento Bug Bounty #14 - Persistent Vulnerability

Document Title: =============== Ebay Magento Bug Bounty 14 - Persistent Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1463 EIBBP-31602 Release Date: ============= 2015-06-30 Vulnerability Laboratory ID VL-ID:...

Ebay Magento Bug Bounty #14 - Persistent Vulnerability

Document Title: =============== Ebay Magento Bug Bounty 14 - Persistent Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1463 EIBBP-31602 Release Date: ============= 2015-06-30 Vulnerability Laboratory ID VL-ID:...

Trio of Vulnerabilities Patched in Magneto Web App

A trio of vulnerabilities were recently patched in eBay’s Magento e-commerce web application that could have let attackers carry out a handful of exploits, including phishing, session hijacking, and data interception. Hadji Samir, a researcher at the firm Vulnerability Lab dug up the problems...

eBay Magento Cross Site Scripting

Document Title: =============== Ebay Magento Bug Bounty 17 - Client Side Cross Site Scripting Web Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1473 EIBBP-31541 Release Date: ============= 2015-06-15 Vulnerability Laboratory ID VL-ID:...

eBay Magento Persistent Script Insertion

Document Title: =============== Ebay Magento Bug Bounty 10 - Persistent Filename Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1457 eBay Inc. Bug Bounty Program ID: EIBBP-31603 Video: https://www.youtube.com/watch?v=WffsHd8pibE Release...

eBay Magento Cross Site Request Forgery

Document Title: =============== Ebay Magento Bug Bounty 12 - Cross Site Request Forgery Web Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1460 Video: http://www.vulnerability-lab.com/getcontent.php?id=1526 View Video:...

Ebay Inc Magento #10 - Persistent Filename Vulnerability

Document Title: =============== Ebay Inc Magento 10 - Persistent Filename Vulnerability References: =========== http://www.vulnerability-lab.com/getcontent.php?id=1458 Video: https://www.youtube.com/watch?v=WffsHd8pibE Advisory: http://www.vulnerability-lab.com/getcontent.php?id=1457 EIBBP-31603...

Ebay Magento Bug Bounty #12 - CSRF Web Vulnerability

Document Title: =============== Ebay Magento Bug Bounty 12 - CSRF Web Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1460 Video: http://www.vulnerability-lab.com/getcontent.php?id=1526 View Video: https://www.youtube.com/watch?v=x7uaABfxxU...