Lucene search
K

Samsung Cross Site Scripting

🗓️ 01 Jun 2013 00:00:00Reported by David TapiaType 
packetstorm
 packetstorm
🔗 packetstormsecurity.com👁 21 Views

Samsung XSS vulnerability disclosed by David Tapi

Code
`Hi all!  
  
Mi name is David Tapia. I would like to disclose an XSS vulnerability in  
images.samsung.com. I tried to warn them two months ago using their bug  
bounty program, but they answered me saying that it is only available for  
their Smart TVs . I totally agree with them but they could have fixed it  
since this happened almost 3 months ago.  
  
The same vulnerability could be exploited in a domain of Adobe Scene 7, but  
they already have fixed it (without giving me any Security Acknowledgment).  
  
Here is the proof of concept:  
  
http://images.samsung.com/s7ondemand/brochure/flash_brochure.jsp?company=samsung&sku=&config=233%22;alert%28'XSS'%29;//&zoomwidth  
=  
  
Best Regards,  
  
David Tapia  
`

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

01 Jun 2013 00:00Current
7.4High risk
Vulners AI Score7.4
21