croisieres.edreams.fr Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1140176 Security Researcher ELProfesor Helped patch 2791 vulnerabilities Received 8 Coordinated Disclosure badges Received 106 recommendations , a holder of 8 badges for responsible and coordinated disclosure, found a security vulnerability affecting croisieres.edreams.fr...

id.edreams.com XSS vulnerability

Vulnerable URL: http://id.edreams.com/engine/searchEngines/pickers/trainspickerint.jsp?field=%22%3E%3Csvg/onload=prompt%28/OPENBUGBOUNTY/%29%3E Details: Description| Value ---|--- Patched:| Yes, at 27.07.2017 Latest check for patch:| 27.07.2017 23:05 GMT Vulnerability type:| XSS Vulnerability...

nz.edreams.com XSS vulnerability

Vulnerable URL: http://nz.edreams.com/engine/searchEngines/pickers/trainspickerint.jsp?field=%22%3E%3Csvg/onload=prompt%28/OPENBUGBOUNTY/%29%3E Details: Description| Value ---|--- Patched:| Yes, at 27.07.2017 Latest check for patch:| 27.07.2017 23:05 GMT Vulnerability type:| XSS Vulnerability...

eg.edreams.com XSS vulnerability

Vulnerable URL: http://eg.edreams.com/engine/searchEngines/pickers/trainspickerint.jsp?field=%22%3E%3Csvg/onload=prompt%28/OPENBUGBOUNTY/%29%3E Details: Description| Value ---|--- Patched:| Yes, at 27.07.2017 Latest check for patch:| 27.07.2017 23:05 GMT Vulnerability type:| XSS Vulnerability...

edreams.ae XSS vulnerability

Vulnerable URL: http://www.edreams.ae/engine/searchEngines/pickers/trainspickerint.jsp?field=%22%3E%3Csvg/onload=prompt%28/OPENBUGBOUNTY/%29%3E Details: Description| Value ---|--- Patched:| Yes, at 27.07.2017 Latest check for patch:| 27.07.2017 23:04 GMT Vulnerability type:| XSS Vulnerability...

ca.edreams.com XSS vulnerability

Vulnerable URL: http://ca.edreams.com/engine/searchEngines/pickers/trainspickerint.jsp?field=%22%3E%3Csvg/onload=prompt%28/OPENBUGBOUNTY/%29%3E Details: Description| Value ---|--- Patched:| Yes, at 27.07.2017 Latest check for patch:| 27.07.2017 23:04 GMT Vulnerability type:| XSS Vulnerability...

edreams.net XSS vulnerability

Vulnerable URL: http://www.edreams.net/engine/searchEngines/pickers/trainspickerint.jsp?field=%22%3E%3Csvg/onload=prompt%28/OPENBUGBOUNTY/%29%3E Details: Description| Value ---|--- Patched:| Yes, at 27.07.2017 Latest check for patch:| 27.07.2017 23:04 GMT Vulnerability type:| XSS Vulnerability...

nl.edreams.com XSS vulnerability

Vulnerable URL: http://nl.edreams.com/engine/searchEngines/pickers/trainspickerint.jsp?field=%22%3E%3Csvg/onload=prompt%28/OPENBUGBOUNTY/%29%3E Details: Description| Value ---|--- Patched:| Yes, at 27.07.2017 Latest check for patch:| 27.07.2017 23:04 GMT Vulnerability type:| XSS Vulnerability...

eDreams-Flights, Hotels & Cars - Customized SSL, Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application eDreams-Flights, Hotels & Cars published at the 'play' market has multiple vulnerabilities...

edreams.com.ve XSS vulnerability

Vulnerable URL: http://www.edreams.com.ve/engine/searchEngines/pickers/trainspickerint.jsp?form=trainsSearch=arrivalLocation=3511122426 Details: Description| Value ---|--- Patched:| Yes, at 26.07.2017 Latest check for patch:| 26.07.2017 15:58 GMT Vulnerability type:| XSS Vulnerability status:|...