List: websecurity@lists.webappsec.org
From: sarvesh shete
[WEB SECURITY] [Web Security] Can a PADSS certified system be hacked
Tue, May 21, 2013 3:16 AM
Hi,
Can a system which is PA DSS certified be hacked?
Hacked means not in case of getting sensitive data(data is stored with
AES256 and strong cryptography mechanism) but hacked means getting vertical
privilege escalation, XSS, Sql injection in the application.