Full Disclosure mailing list archives
Phishmarket #2 (IFrame Spoofing/XSS on Austrian bank sites)
From: skyout () gmx net
Date: Fri, 16 Feb 2007 16:26:52 +0000 (GMT)
Dear Sir or Madam, I want to point your attention to a new list, that shows up to 40 (!) vulnerabilities on Bank sites of Austria and proves another time how insecure online banking still is. The list is publicly available under: ------------------------------------------------------------ http://baseportal.com/baseportal/phishmarkt/at ------------------------------------------------------------ To every page a demo is provided, that shows how to trigger the mostly IFrame Spoofing and XSS vulnerabilities on the page. I would appreciate you taking a look at the list and spreading the link to make those sites react quickly and fix the problem. SkyOut _______________________________________________ Full-Disclosure - We believe in it. Charter: http://lists.grok.org.uk/full-disclosure-charter.html Hosted and sponsored by Secunia - http://secunia.com/
Current thread:
- Phishmarket #2 (IFrame Spoofing/XSS on Austrian bank sites) skyout (Feb 16)
- Re: Phishmarket #2 (IFrame Spoofing/XSS on Austrian bank sites) Matthew Flaschen (Feb 16)
- Re: Phishmarket #2 (IFrame Spoofing/XSS on Austrian bank sites) skyout (Feb 17)
- Re: Phishmarket #2 (IFrame Spoofing/XSS on Austrian bank sites) Matthew Flaschen (Feb 16)