Phishing gone: eBay patches to block session-jacking Magento holes

XSS, CRSF, and input holes fixed

Vulnerability Lab researcher Hadji Samir says eBay has squashed three vulnerabilities in its Magento shopping platform that could permit session hijacking and man-in-the-middle attacks."