Lucene search

K
openbugbountyRandom_RobbieOBB:202702
HistoryJan 03, 2017 - 3:42 p.m.

betseyjohnson.com XSS vulnerability

2017-01-0315:42:00
Random_Robbie
www.openbugbounty.org
7
Vulnerable URL:
http://www.betseyjohnson.com/catalog/search.cmd?cm_sp=globalheader-_-search&form;_state=searchForm&CSRF;_TOKEN_SEARCHCMD=&keyword1;=Test&keyword;=Test'"--!>confim`OPENBUGBOUNTY`//