<<< Date Index >>>     <<< Thread Index >>>

Amazon and Msn vulnerabilities



For the complete article read, http://blogs.hackerscenter.com/dcrab/?p=19

Amazon.com: One of the largest e-commerce websites in the world. It is 
vulnerable to CR LF injection vulnerabilities, that allow an exploitable XSS 
situation to exist

Screenshot:

http://blogs.hackerscenter.com/dcrab/amazon.jpg

Msn: I have worked with microsoft on several occassions and found it a huge 
drag to work with thier slow security response center. I found about 4 - 5 
vulnerabilities on various websites in the microsoft network, and reported them 
in to the Microsoft Security Center. It?s been almost a year since, and 2 of 
them are fixed, The others still exist. These are completely exploitable as XSS 
vulnerabilities too.

Screenshot:

http://blogs.hackerscenter.com/dcrab/msn.jpg