Lucene search
+L

1 matches found

Hacker One
Hacker One
added 2016/07/11 4:40 p.m.27 views

OLX: stored XSS in olx.pl - ogloszenie TITLE element - moderator acc can be hacked

Hello, The OLX.PL is vulnerable to stored XSS attack. When adding new advertisement, it is possible to put a payload in its title here I used Titlealert1 I see ads are being pre-moderated, however it can remain uncaught also the length limit in title field is enough to insert into it e.g. a BeEF...

1.6AI score
SaveExploits0
Rows per page
Query Builder