MakeBid Auction Deluxe Plaintext...

- AV AC AU C I A
发布: 2002-02-09
修订: 2025-04-13

MakeBid Auction Deluxe is software for hosting real-time auctions on a website. It is written in Perl and will run on most Unix and Linux variants. MakeBid Auction Deluxe stores authentication credentials in plaintext in cookies. BugTraq ID 4069 "MakeBid Auction Deluxe Cross-Site Scripting Vulnerability" describes an issue which allows a remote attacker to steal cookies from legitimate users of the service. In combination with this issue, an attacker is able to access auction accounts of other legitimate users.

0%
暂无可用Exp或PoC
当前有0条受影响产品信息