A persistent filter bypass and persistent input validation web vulnerability was identified in the front- and back-end of Ebay.
The vulnerability was discovered by Vulnerability Laboratory researcher Benjamin Kunz Mejri in May 2014 and reported to the company, which recently issued a patch in late July.
According to a report by Vulnerability Laboratory, the critical vulnerability was identified in the ProStore service registration form and can be exploited remotely by an attacker, through the fields for entering the users' first and last name.
For more information about the vulnerability, you can visit the Vulnerability Laboratory website: https://www.vulnerability-lab.com/get_content.php?id=1265.
Below you can see the video demonstrating this vulnerability:
