Cyber Risks · PortSwigger Research

Professional 1.3.05

Summary: PortSwigger released Burp Suite version 1.3.05 on 26 May 2010, adding new Burp Scanner checks for issues including file upload functionality, robots.txt, SSL certificate problems, SQL syntax in request parameters, and Silverlight crossdomain policy. The release also adds checks for disclosure of social security numbers, credit card numbers, database connection strings and server-side source code, plus ASP.NET tracing and debugging enabled and HTTP PUT enabled.

Why it matters: The new checks target exposed credit card and social security numbers and database connection strings - data whose disclosure carries direct regulatory and breach costs, not just a scanner finding.

Read the original at PortSwigger Research ↗

Topics
Vulnerabilities & Patching
Related