CCBILL.COM Internet billing service multiple vulnerabilities - GoFuckYourself.com

Faustino · 08-17-2010, 05:43 PM

QUOTE:

"We want to warn you about security vulnerabilities in CCBILL.COM
Internet billing service.

CCBill is an Internet billing service. Established in 1998, the company
provides third-party billing, or turn-key solutions, for e-Merchants
requiring payments by way of credit card, debit card, or e-check,
European Debit/Direct Pay, and telephone payment.

Since Ccbill is a privately held company little is known about it's
finances however it is estimated that more than a billion dollars per
year in credit card charges are processed through Ccbill in the us and
abroad.

Time Table:
# 20/07/2010 We have found multiple Blind SQL injections.

# 30/07/2010 - Vendor notified. / no response
# 03/08/2010 - Vendor notified. / no response
# 10/08/2010 - Vendor notified. / no response

CCBILL.COM vulnerability:

Multiple blind SQL injections

It's possible to get all customers FULL personal details, server admins
etc...

Also is possible to read any file from ccbill.com and write to this
server too.

JPG sample tables proof:
http://www.ariko-security.com/images/ccbill_proof1.jpg

Credit:
# Discoverd By: MG / Ariko-Security 2010
# http://advisories.ariko-security.com...nstwa_719.html

"

Faustino · 08-17-2010, 05:45 PM

Since ccbill.com handles a lot of transactions for porn sites, it could be
potentionally embarassing for a lot of people...

CYF · 08-17-2010, 05:45 PM

little late on that:

https://gfy.com/fucking-around-and-business-discussion/982701-ccbill-com-multiple-vulnerabilities.html

08-17-2010, 05:43 PM	#1
Faustino Registered User Industry Role: Join Date: Jul 2002 Location: Mexico City Posts: 56	CCBILL.COM Internet billing service multiple vulnerabilities QUOTE: "We want to warn you about security vulnerabilities in CCBILL.COM Internet billing service. CCBill is an Internet billing service. Established in 1998, the company provides third-party billing, or turn-key solutions, for e-Merchants requiring payments by way of credit card, debit card, or e-check, European Debit/Direct Pay, and telephone payment. Since Ccbill is a privately held company little is known about it's finances however it is estimated that more than a billion dollars per year in credit card charges are processed through Ccbill in the us and abroad. Time Table: # 20/07/2010 We have found multiple Blind SQL injections. # 30/07/2010 - Vendor notified. / no response # 03/08/2010 - Vendor notified. / no response # 10/08/2010 - Vendor notified. / no response CCBILL.COM vulnerability: Multiple blind SQL injections It's possible to get all customers FULL personal details, server admins etc... Also is possible to read any file from ccbill.com and write to this server too. JPG sample tables proof: http://www.ariko-security.com/images/ccbill_proof1.jpg Credit: # Discoverd By: MG / Ariko-Security 2010 # http://advisories.ariko-security.com...nstwa_719.html " __________________ PORNO GRATIS

08-17-2010, 05:45 PM	#2
Faustino Registered User Industry Role: Join Date: Jul 2002 Location: Mexico City Posts: 56	Since ccbill.com handles a lot of transactions for porn sites, it could be potentionally embarassing for a lot of people... __________________ PORNO GRATIS

08-17-2010, 05:45 PM	#3
CYF Coupon Guru Industry Role: Join Date: Mar 2009 Location: Minneapolis Posts: 10,973	little late on that: https://gfy.com/fucking-around-and-business-discussion/982701-ccbill-com-multiple-vulnerabilities.html __________________ Webmaster Coupons Coupons and discounts for hosting, domains, SSL Certs, and more! AmeriNOC Coupons \| Certified Hosting Coupons \| Hosting Coupons \| Domain Name Coupons