NASDAQ Vulnerable to XSS

[InfoSec News <alerts () infosecnews org>]

http://www.infosecnews.org/nasdaq-vulnerable-to-xss/

By William Knowles @c4i
Senior Editor
InfoSec News
January 16, 2015

Bob Greifeld, CEO of The NASDAQ Stock Market explains in a promotional 
video “that NASDAQ is a technology based company, those businesses that 
we’re in have a unifying theme that are built upon our technology.”

Top technology companies such as Google, Tesla, Amazon, and GoPro to name 
a few use NASDAQ as their trading exchange.

When NASDAQ “goes to a developing market and provide to them our 
technology, its not just the software code, its all the best practices 
that have been developed on a global basis that they to integrate into 
their operations.”

With this information in mind, it doesn’t explain why a security 
researcher named analfabestia was able to discover and report a new XSS 
(Cross-Site Scripting) vulnerability on NASDAQ.com on January 14, 2015, 
The sixth such vulnerability in nearly seven years.

[...]

--
Evident.io - Continuous Cloud Security for AWS.
Identify and mitigate risks in 5 minutes or less.
Sign up for a free trial @ https://evident.io/