Coinbase: Invoice Details activate JS that filled in

Hello security team, I found XSS on pending invocation details. Tested on Firefox. Scenario: 1. Go to https://coinbase.com/merchanttools?linktype=emailinvoice 2. Fill in valid email. 3. Subject; Payment request from " 4. Total Bitcoin 1 and for order put a " 5. Description and Customer ID as a " ...

Threat Outbreak Alert RuleID10638: Email Messages Distributing Malicious Software on July 13, 2014

Medium Alert ID: 34912 First Published: 2014 July 14 13:05 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID10638 may contain the following files: Name | Siz...

WHMCS 4.x (invoicefunctions.php, id param) - SQL Injection Vulnerability

No description provided by source. Title: WHMCS 4.x SQL Injection Vulnerability Google Dork: intext:Powered by WHMCompleteSolution OR inurl:submitticket.php?? Author: Ahmed Aboul-Ela Contact: Ahmed.Aboul3laatgmaildotcom Date: 14/5/2013 Vendor: http://www.whmcs.com Version: 4.5.2 and perior versio...

MyClientBase 0.12 - Multiple Vulnerabilities

No description provided by source. Title: ====== MyClientBase v0.12 - Multiple Web Vulnerabilities Date: ===== 2012-04-30 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=511 VL-ID: ===== 511 Introduction: ============= MyClientBase is a simple, intuitive, free and open...

EZ Invoice Inc. EZI 2.0 Invoices.PHP SQL Injection Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/16133/info EZI is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. Successful exploitation could result i...

PHPCart Input Validation Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/13406/info PHPCart is prone to a remote input validation vulnerability. The issue exists because the software fails to sufficiently sanitize URI parameter data that is employed when computing product charges. A remote...

PHP Invoice 2.2 Home.PHP Cross-Site Scripting Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/20221/info PHP Invoice is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to have arbitrary script code execute in...

Threat Outbreak Alert RuleID10470: Email Messages Distributing Malicious Software on June 27, 2014

Medium Alert ID: 34779 First Published: 2014 June 27 18:06 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID10470 may contain the following files: Name | Siz...

Threat Outbreak Alert RuleID10325: Email Messages Distributing Malicious Software on June 15, 2014

Medium Alert ID: 34620 First Published: 2014 June 16 17:15 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID10325 may contain the following files: Name | Siz...

Threat Outbreak Alert RuleID10170: Email Messages Distributing Malicious Software on June 1, 2014

Medium Alert ID: 34499 First Published: 2014 June 2 18:01 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID10170 may contain the following files: Name | Size...

Threat Outbreak Alert: Fake Invoice Notice Email Messages on May 28, 2014

Medium Alert ID: 34387 First Published: 2014 May 28 13:57 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain an invoice detail for the recipient. The text in the email message attempts to convince the recipient to open the...

Threat Outbreak Alert: Fake Invoice Payment Notice Email Messages on May 27, 2014

Medium Alert ID: 34355 First Published: 2014 May 27 13:33 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a payment slip notification for the recipient. The text in the email message attempts to convince the recipient to...

Threat Outbreak Alert: Fake Order Invoice Shipping Information Email Messages on May 27, 2014

Medium Alert ID: 34351 First Published: 2014 May 27 13:30 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a shipping information invoice for the recipient. The email message attempts to convince the recipient to open the...

Threat Outbreak Alert: Fake Invoice Notice Email Messages on September 2, 2014

Medium Alert ID: 34314 First Published: 2014 May 21 14:06 GMT Last Updated: 2014 September 3 13:34 GMT Version: 6 Summary Cisco Security has detected significant activity related to Portuguese-language spam email messages that claim to contain an invoice message notice for the recipient. The text...

Threat Outbreak Alert: Fake Financial Transaction Notification Email Messages on May 20, 2014

Medium Alert ID: 34308 First Published: 2014 May 20 18:35 GMT Version: 1 Summary Cisco Security has detected significant activity related to Portuguese-language spam email messages that claim to contain an electronic payment invoice for the recipient. The text in the email message attempts to...

Threat Outbreak Alert: Fake Invoice Payment Confirmation Email Messages on May 15, 2014

Medium Alert ID: 34237 First Published: 2014 May 15 12:19 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain an invoice payment request notice for the recipient. The text in the email message attempts to convince the...

Threat Outbreak Alert: Fake Invoice Confirmation Email Messages on May 8, 2014

Medium Alert ID: 34203 First Published: 2014 May 13 12:22 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a product invoice notification for the recipient. The text in the email message attempts to convince the recipient...

Threat Outbreak Alert: Fake Credit Card Invoice Notification Email Messages on May 12, 2014

Medium Alert ID: 34202 First Published: 2014 May 13 12:19 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a credit card invoice for the recipient. The text in the email message attempts to convince the recipient to open...

Threat Outbreak Alert: Fake Product Purchase Order Invoice Request Email Messages on May 7, 2014

Medium Alert ID: 34157 First Published: 2014 May 7 19:15 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a product purchase order invoice request for the recipient. The text in the email message attempts to convince the...

Threat Outbreak Alert: Fake Product Invoice Statement Email Messages on May 7, 2014

Medium Alert ID: 34153 First Published: 2014 May 7 18:41 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain an invoice statement for the recipient. The text in the email message attempts to convince the recipient to open th...