OVH.ie search form XSS bug

Vulnerable page: http://www.ovh.ie/

PoC

"><img src=http://te-home.net/images/logo.png>

It is enough to insert any XSS code directly into search field and your code will be executed and displayed by /js/search/gsearch.js script right away.

Note: This is a proof of concept and it doesn't reflect the views or interests of above websites.

Posted by RoLex on 2016-04-10 00:37 ⋅ 7 likes

Comments

Date	Author	Comment
-	-	Leave your comment
2016-05-19 13:37	Guest	OVH
-	-	Leave your comment

⇤←1 →⇥

← Daily free list of SOCKS proxies now available | Norman.com download submission form XSS bug →