SSD Advisory – eBay Arbitrary Invoice Disclosure
Vulnerability Description A vulnerability in the way invoices are handled by eBay allows users that sell items on eBay to view other’s reseller’s invoices. Though access to the invoice is somewhat arbitrary, there is no easy way to find a specific invoice of a specific seller, it is possible to harvest a large amount of …
SSD Advisory – eBay Arbitrary Invoice Disclosure Read More »