Reported: 04 April 2006
Occurred: 19 April 1999

Classifications:

• Attack Method: Cross Site Scripting (XSS)
• Country: USA
• Outcome: Disclosure Only

A very early XSS issue at eBay. Interesting historically as it seems that at the time the term XSS was not yet in use.

References:

• eBay downplays security hole
  News Story, CNet, 19 April 1999
• 'EBayla' Bug Strikes eBay
  News Story, Wired, 19 April 1999
• The Ebayla Bug And How To Protect Yourself
  Advisory, Because We Can (Miror), 21 April 1999

---

This work is licensed under the Creative Commons Attribution License. To view a copy of this license, visit http://creativecommons.org/licenses/by/2.5/ or send a letter to Creative Commons, 559 Nathan Abbott Way, Stanford, California 94305, USA.