 Persistent XSS bug discovered on eBay
Written by DPWednesday, 6 October 2010
Security researcher " Side3ffects" has contacted us regarding a critical persistent XSS that he discovered on eBay:
"Once you login to your account on eBay, edit the option "About me".
Now go to :
Demo URL (My profile):
It is also vulnerable to redirection with the following XSS attack vector:
'"--><script>alert(/Xss2ro07 aKa Side3ffects)</script>
<script>document.onload=location.href='http://www.xssed.com</script>"
One of the possible exploitation scenarios is malicious people stealing cleartext credentials from registered users by injecting an iframe tag that retrieves another rogue eBay login page from a remote server.
Screenshot:
Other reported XSS bugs affecting eBay domains include (all still pending a fix):
Secure eBay's Law Enforcement eRequest System, discovered by " Nemessis":
eBay Italy Ads, another one discovered by " d3v1l":
eBay has been XSSed many times in the past.
Related News on XSSed:
| 
%3C/script%3E%3Cimg%20src=%22http://i53.tinypic.com/286v241.gif%22%3E%3Cmarquee%20bgcolor=%22orange%22%3EInSecurity.Ro%3C/marquee%3E%3Ciframe%20src%20=http://www.youtube.com/watch?v=SW7oja1FKcY%20width=%22550%22%20height=%22700%22%20\%3E%3C/div%3E){kind=link}