Visit our newest sister site!
Hundreds of free aircraft flight manuals
Civilian • Historical • Military • Declassified • FREE!

TUCoPS :: Web :: Specific Sites :: b06-1039.htm

Vulnerability in e-gold
Vulnerability in e-gold
Vulnerability in e-gold

Vulnerability was fixed in 
money transfer script.

Problem  description:

If authenticated user is referred to the script AccounID/PassPhrase validation is not performed.

By redirecting user to URL 
it's possible to transfer money to another account without validation.

On march, 13th 2006 reported to e-gold
On march, 14th 2006 fixed

Details posted on 

I did get a small "buggs bounty" from e-gold for this info.

TUCoPS is optimized to look best in Firefox® on a widescreen monitor (1440x900 or better).
Site design & layout copyright © 1986-2015 AOH