Don't Be Ridicules You Say. Well, Using Mountain Network's Webcart Scripts Is About As Secure As This Toy Cash Register.
Several People Have Tried To Get Mountain Networks To Take The Security Holes In Their Scripts Seriously,
But Mountain Networks Only Response Has Been To Blame The Site Owners Who Have Bought WebCart.
They Claim, If The Site Owners Install The Scripts Properly, They Would Be Secure.
Our Response, BULLSHIT!. The Webcarts Scripts Have Some Major Security Problems PERIOD.
While It Maybe Possible To Secure WebCart Via Htaccess Type Controls, It Seems Very Unlikely.
You See, Webcart's Security Problem Are At The Architectural Leval.
The Webcarts Scripts Have No Security Measures What So Ever And To Make Things Worst,
No Input Parsing!
One Of The Security Holes Is So Serious, That One Of The Scripts Can Be Easily Exploited
To Reveal Your Server Password File.
To The SysAdmin Of This Site, Sorry For Defacing Your Site, But It Appears This Is The Only Way
To Get Mountain Networks To Take Security Seriously. We've Waited Over A Week
Since Hitting A Webcart Site In Order To See If Mountain Networks Would Do Anything.
It Has Become VERY Clear, Mountain Networks
Won't Admit To Design Flaws And Fix The Security Holes Until It's Proven To Them.
The Only File Modified Was Your Index.html. The Original Was Saved As Webcart.html.
We Did NOT Access Any Other Files.
Visit:
Hackernews.com
Attrition.org
DutchThreat.org
MindSec.Com
Security is a Myth!