ROFL. god you're clueless :1orglaugh

...and out come the people who get paid to bash CCBill

LOL that really shows how clueless you are. How am I paid to bash Ccbill? I've used them for more than 10 years now.

that's pretty clueless dude :1orglaugh

and no, I'm not paid to bash CCBill.

This one looks like an SQL injection. See the cartoon I posted. Unbelievable that a multi-million dollar CC processing company would not sanitize input data to prevent what appears to be a relatively simple attack... especially on a non login required public knowledgebase. :helpme:

:2 cents:

Hopefully ccbill will finish looking into it and then come in and say "that shit is bananas!"

somehow I doubt it.

So bashing each other aside, did anyone from CCBill address the CCBill security issues yet?

That would be a "no".

FIDDY CCBILL VULNERABILITIES!!!

I can't believe I beat Woj to the punch. WooHoo! Ahem.

still waiting for a ccbill fix.

They are too busy counting their monies.

CCBILL has had this problem for years... Why change anything now?

Not everything.

Hack my php script.

Awesome.

Nice script

Get an alternate merchant account already. Quit paying 15% or more. See Sig Below. Free to Apply.

cool stuff

hope its fixed soon

I got the answer:thumbsup

still no reply?

Paul, don't "LOOK INTO IT", FUCKING FIX IT!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!

;)

Sally.

still no reply?

At one point in time I was aware of how to create logins and passwords on any CCBill site, I believe it worked like a charm. Was years ago though.

why using CCbill where you can use NetPay international ..a leader in providing on-line, real-time payment processing solutions in a solid, secure and reliable manner.

not only secure, but has advanced technology and new payment solution to European customers.

contact me for info.
May

Again only one who is losing money are affiliates. CCbill gets it's cut, sponsor too. Also problems with CCbill sales started around those dates mentioned in report...

if these vulnerabilities are true, then ccbill security is below ANY standard

Classy Bump...

has this been fixed yet?

I hope so. It would really suck to wake up one day and hear Visa or someone has shut down CCbill for "certain program deficiencies". :(

somehow I don't think it's fixed yet :disgust

Come on guys. Give them some time to fix it.

In 2005 I complained to CCBill that their website was a pain in the ass and not user-friendly to use. Now 5 years later look how much (or nothing) has changed. The website still looks like Web 1.0. However, the CCBill private jet sure does look fine.

Epoch is also weak code. Just try to sign up as an affiliate and notice the bugs in the sign-up form. The programmer didn't know (or was too lazy) to dynamically fill in the SELECT boxes or the RADIO buttons. They lose their values when the form is recreated during the field validation process. With such newbie errors present one can only fear that the same programmer has been to lazy to sanitize inputs other places in the code, thus allowing for SQL injections.

The website looks bogus. If it was possible to write to CCBill's server, the easiest way to alert CCBill about the problem would be to deface their website.

yes, their UI is pure SHIT!
for a few thousand dollars they could re-design the whole site and have
a new fresh look that would pay for it self in matter of days!

Of course it isn't fixed. This is CCBill we're talking about.

As I said up top, they're too busy counting their monies to worry about real issues.

ccbill still getting hacked eh

CCBill, why get this topic locked?
https://gfy.com/showthread.php?t=992256

PHP for the WIN.....




....for hackers of course.



LOL! :1orglaugh

it's not bogus.

This report was a complete joke. This was just a variation of a Nigerian scam. We contacted the website and they responded via GMAIL if we would "Western Union" them 10k they would tell us what was wrong. LOL They create a fake security page and post stuff and hope companies will pay the blackmail money VIA WESTERN UNION (LOL)

But hey if it is on the Internet it MUST BE TRUE.

End of Story.


Ron C
_________
CEO

CCbill.com
Cavecreek.com