This site uses cookies. In order to read how we handle cookies please click here. Click on this message to accept and hide.
Перейти вверх
216.73.216.198.US.SSL

OVH.ie search form XSS bug

Vulnerable page: http://www.ovh.ie/

PoC
"><img src=http://te-home.net/images/logo.png>

It is enough to insert any XSS code directly into search field and your code will be executed and displayed by /js/search/gsearch.js script right away.

PoC


Note: This is a proof of concept and it doesn't reflect the views or interests of above websites.
Написано RoLex в 2016-04-10 00:37 7 likes

Комментарии

Дата Автор Комментарий
- - Leave your comment
2016-05-19 13:37 Guest OVH bomb
- - Leave your comment