Michael Cooney
Senior Editor

Microsoft Xbox site vulnerable

Opinion
May 27, 20051 min

xbox360.jpg
Oh, good grief. Microsoft *just* formally announced its new gaming console, the Xbox 360, only to leave its companion site vulnerable to cross-scripting errors and phishing.

Seriously, can’t they make anything secure?

Finjan Software announced this week that it discovered the vulnerability at www.xbox360.com, which also happens to be the slowest-loading site of all time.

Finjan said, “The cross site scripting vulnerability could be potentially exploited to gather personal and confidential information (e-mail address, home address, credit card number, etc.) from innocent consumers wishing to pre-order Microsoft’s new gaming console.”

The company said it alerted Microsoft to its discovery and the site has been fixed.