Thursday, September 19, 2013

Critical vulnerability: buy any product on eBay to only 0.01 USD

Have you thought about buying an iPhone or a free Play Station? Well, you could, but it's too late now, as an Indian security researcher goes with the handful of Ishwar Prasad Bilodeau had found a vulnerability criticizes largest online shopping site eBay in the world which allowed users to buy any product in only 1 equivalent of Indian rupee at 0.01 USD.


The vulnerability has been discovered on designated Indian domain for eBay (www.ebay.in), which was set yesterday  Ishwar reported it to authorities eBay on August 6, 2013.


In a conversation by email, security researcher told me about the vulnerability that, with the help of this bug, he was able to buy the most expensive product on eBay in just 1 Indian rupee.


However, Ishwar won't be paid to save eBay of loose millions of dollars that the company does not any program of premiums for bug like Facebook and Microsoft. As a reward, eBay said its name on their official website in the list of security researchers who helped the company in determining critical vulnerabilities.


Here is the link where eBay acknowledged 122 researchers including Ishwar Prasad Bhat services.


Ishwar is a first year student of 18 years of collage Veltechmulti Tech Engineering to Avadi, Chennai city, India.

No comments:

Post a Comment

Popular Posts