Jump to content


Photo

F-Secure, Veikkaus, POP Vakuutus HTML5 sites By SC5.io Vulnerable


  • Please log in to reply
No replies to this topic

#1 saderc

saderc

    Newbie

  • New Members
  • Pip
  • 1 posts

Posted 19 July 2013 - 06:26 AM

Just weeks after SC5, a company based in Finland, launched its HTML5 technology and sold it to Veikkaus, POP Vakuutus and F-Secure Personal Cloud Service, big HTML5 loopholes that are easy to exploit have been sited on the frontend of Veikkaus and POP Vakuutus sites by users. Two users have also reported being able to execute unwanted code on the F-Secure site through their browser facilitated by the cross site scripting vulnerability associated with HTML5. All these vulnerabilities are unique to a programmer called Martti Malmi.

There are several other vulnerabilities reported by companies whose sites have been worked on by Martti Malmi. Be warned and avoid falling victim.






0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users

Cheap Linux VPS from $5
SSD Storage, 30 day Guarantee
1 TB of BW, 100% Network Uptime

AlphaBit.com