HomeRapidalertExclusive: PenTesting on E-food.gr. Serious vulnerabilities identified

Exclusive: PenTesting on E-food.gr. Serious vulnerabilities identified

Our friends from the excellent site iGuRu.gr have published an article regarding the security of the website e-food.gr.

iGuRu is a friendly SecNews website, covering news related to technology & IT on a daily basis, while its administrators are special collaborators of SecNews on various topics. Read their very interesting EXCLUSIVE article:

On 18/09/2014, we revealed after a PenTesting (penetration test) that a highly trafficked Greek website had many vulnerabilities in its code. The article stated:

[signoff icon=”icon-target”]————.gr is a pioneering idea that was successfully implemented and would be the envy of everyone. However, beyond the marketing for a site that wants to respect itself, its customers, etc., it is security that is usually not given the necessary importance, since functionality is more important.[/signoff]

Today, we can publish the vulnerabilities we discovered, as well as the name of the website, since its administrators responded immediately after we contacted them.

The developers thought that using HTTPS would save them from the above attacks. Without exaggeration, someone malicious would have taken down their site and tarnished their name.
As mentioned above, after the vulnerabilities were discovered, iGuRu.gr contacted the e-food.gr management team. We sent the presentation with the vulnerabilities and the company's technical department got to work. The site's technical support team deserves a thumbs up for their awareness of security issues, as well as for their immediate response. They demonstrated that the security of their customers is their top priority, promptly fixing each vulnerability described above with a high sense of responsibility.

, iGuRu.gr will reveal another online shopping website with several vulnerabilities that put many Greeks who make purchases online at risk. Stay tuned.

Source: secnews.gr

📧
Subscribe to the SecNews Newsletter

The most important Security & Technology news in your Inbox.

SecNews
SecNewshttps://www.secnews.gr
In a world without fences and walls, who needs Gates and Windows

SEARCH

FOLLOW US

📧
Newsletter SecNews
The most important Security & Technology news in your inbox.

LIVE NEWS