5609 matches found
osCommerce 2.12.2 - Checkout_Payment.php Error Output Cross-Site Scripting
osCommerce 2.12.2 - CheckoutPayment.php Error Output Cross-Site Scripting source: https://www.securityfocus.com/bid/7155/info Error output is not sufficiently sanitized of HTML and script code by osCommerce. This may allow for cross-site scripting attacks as remote users could create a malicious...
Multiple vulnerabilities exist within credit card chips thereby allowing malicious user to bypass authentication mechanism
Overview French smart card reader terminals can be fooled into accepting imposter smart cards for payment. Description French smart cards are credit cards with an embedded chip containing certain cardholder, account, and authentication information. These cards are read by automated terminals acro...
VERISIGN "PAYFLOW LINK" PAYMENT SERVICE SECURITY FAILURE
VERISIGN PAYFLOW PAYMENT SERVICE SECURITY FAILURE PAYFLOW LINK SERVICE DESCRIPTION: The final checkout page of various online shopping cart applications presents the shopper with a form asking for credit card acct, exp date, etc. When the shopper submits the form, the data is sent directly to the...
itransact.txt
From: "Jesse S. Williams" Subject: A security flaw itransact.com Date: Fri, 14 Dec 2001 22:39:02 -0500 -- Snip -- I believe I have found a security hole in the itransact.com payment accepting scripts. Currently, the scripts do not require the POST of forms to come from within your own site or...
iBill Management Script - Weak Hard-Coded Password
source: https://www.securityfocus.com/bid/3476/info iBill is an Internet billing company that provides secure payment processing for e-commerce. A vulnerability exists in iBill's CGI password management script called ibillpm.pl. The default password is the client's MASTERACCOUNT name plus two low...
Linux news 3.06.00
Linux 2.4.0test1-ac7 Alan Cox выпустил свою седьмую модификацию Linux 2.4.0test1. Всем, кто поставил себе 2.4.0test1-ac6, следует обратить внимание на строчку "Fix the IDE damage done in ac6" с списке изменений и сделать для себя соответствующие выводы. Подробнее:...
CVE-2000-0288
CVE-2000-0288 affects Infonautics getdoc.cgi. The vulnerability allows remote attackers to bypass the payment phase for accessing documents by altering a form variable. The available sources confirm the existence and description of this issue but do not provide concrete details on affected versio...
