Software
SQL injection vuln found at Panama Papers firm Mossack Fonseca
Reported by itsecurityguru.org
Grey hat security researchers have discovered new flaws in the systems of Panama leak firm Mossack Fonseca. A self-styled “underground researcher” claims to have found a SQL injection flaw on one of the corporate systems of the Panamanian lawyers. “They updated the new payment CMS, but forgot to lock the directory /onion/,” he said via the “1×0123” Twitter profile. Mossack Fonseca specialises in helping its clients to set up firms in tax havens such as the British Virgin Islands.