F-Secure, Veikkaus, POP Vakuutus Websites By SC5.io Vulnerable

[johnny201]

Just weeks after SC5, a company based in Finland, launched its HTML5 technology and sold it to Veikkaus, POP Vakuutus and F-Secure Personal Cloud Service, big HTML5 loopholes that are easy to exploit have been sited on the frontend of Veikkaus and POP Vakuutus sites by users. Two users have also reported being able to execute unwanted code on the F-Secure site through their browser facilitated by the cross site scripting vulnerability associated with HTML5. All these vulnerabilities are unique to a programmer called Martti Malmi.

There are several other vulnerabilities reported by companies whose sites have been worked on by Martti Malmi. Be warned and avoid falling victim.

[Amit Acharya]

https://www.youtube.com/watch?v=BxqlhOZXngM