Critical Vulnerability Found In Russian Payment Service QIWI

guest · Jun 24, 2020

Critical Vulnerability Found In Russian Payment Service QIWI
June 24, 2020
https://latesthackingnews.com/2020/...bility-found-in-russian-payment-service-qiwi/

Recently, a researcher caught a critical vulnerability in the payment service QIWI that could lead to remote code execution.
QIWI Vulnerability
A bug bounty hunter discovered a critical SQL vulnerability in the online payment service QIWI. As he observed, the vulnerability, upon exploitation, could allow an attacker to execute codes on the target servers.

Briefly, he found three SQL injections targeting different underlying queries, yet all in the same place.
This scenario also posed a threat to the sensitive financial information of the customers present within the company’s databases.
Click to expand...

In his bug report, he has explained in detail how he could reproduce the exploit.
QIWI Patched The Flaw
Upon finding the vulnerability, the researcher reported the flaw to QIWI via their bug bounty program on HackerOne.
Click to expand...

Log in or Sign up

Critical Vulnerability Found In Russian Payment Service QIWI

guest Guest

Log in or Sign up

Critical Vulnerability Found In Russian Payment Service QIWI

guest Guest

Useful Searches