70 matches found
PHP Classified OLX Clone Script SQL Injection
Exploit Title: Php Classified OLX Clone Script - SQL Injection Google Dork: N/A Date: 02.03.2017 Vendor Homepage: https://wptit.com/ Software: https://wptit.com/portfolio/php-classified-website-sale/ Demo: http://www.adsthem.com/ Version: N/A Tested on: Win7 x64, Kali Linux x64 Exploit Author:...
Php Classified OLX Clone Script - 'category' SQL Injection
Exploit Title: Php Classified OLX Clone Script - SQL Injection Google Dork: N/A Date: 02.03.2017 Vendor Homepage: https://wptit.com/ Software: https://wptit.com/portfolio/php-classified-website-sale/ Demo: http://www.adsthem.com/ Version: N/A Tested on: Win7 x64, Kali Linux x64 Exploit Author:...
OLX: Reflected XSS in olx.pt
Vulnerable link https://www.olx.pt/ads/q-klnjkoh/?searchdescription= Payload '%2balert1%2b' and finally here a p0c https://www.olx.pt/ads/q-klnjko/?searchdescription='%2balert1%2b'searchprivatebusiness=private Work in latest version of firefox and chrome Cheers Ph0b0s...
OLX: Server Version Of https://www.olx.ph/
i see a server version of your website that have link: https://www.olx.ph/.htaccess The impact of this vulnerability Consult Web References for more information. This is a proof. http://prnt.sc/dtsjmo -- jaypogzz...
OLX: Reflected XSS in [olx.qa]
Hi Team Security @olx I Found Reflected XSS in https://olx.qa via parameter backLink on /m/account/ Information - Reflected XSS : a reflected XSS vulnerability happens when the user input from a URL or POST data is reflected on the page without being stored. This means that an attacker has to sen...
OLX: Multiple vulnerabilities in http://blog.dubizzle.com/uae
http://blog.dubizzle.com/uae/ uses outdated Yoast Seo plugin which has following vulnerabilities: ! Title: Yoast SEO = 3.2.4 - Subscriber Settings Sensitive Data Exposure Reference: https://wpvulndb.com/vulnerabilities/8487 ! Title: Yoast SEO = 3.2.5 - Unspecified Cross-Site Scripting XSS...
OLX: Reflective XSS at m.olx.ph
URL https://m.olx.ph/mobile-phones-tablets/ph-'alert1'%3E%3Cimg%20src=x%3Easdf?q=qwerty Injection happens on lines 769, 770 and repeated also at 1005, 1006 urlNoCategory = '/ph-'alert1'%3E%3Cimg%20src=x%3Easdf?q=qwerty'; urlNoLocation =...
OLX: Reflected XSS in OLX.in
Hello @olx I found the Reflected XSS in olx.in Mobile Site through which malicious javascript code can be executed Affected Parameter: searchcityid=xxxxxx POC: ====== Opening This URL will Popup a Alert Box Having "XSS" as Msg Screenshot Added in Attachments...
OLX: Directory Listing of all the resource files of olx.com.eg
By looking in the css of " olx.com.eg " i found that the logo src is linking to an external website https://olxegstatic-a.akamaihd.net/bd498cb-868/packed/img/2fc685b4081782d863b0c0c452ee54197b.png this was so normal until i simply changed the url to just https://olxegstatic-a.akamaihd.net/ I foun...
OLX: Name, email, phone and more disclosure on user ID (API)
Hello, When I checked the OLX.pl app, I found out that when I click on a profile, personal information like email or phonenumber is exposed. GET https://ssl.olx.pl/api/v1/users/1/ HTTP/1.1 Host: ssl.olx.pl Cookie: PHPSESSID=hb6utlcj860nd7p2jt6ha0tu71 Connection: keep-alive Accept: / Version: v1.1...
OLX: Full path disclosure vulnerability at http://corporate.olx.ph
Hello Security team, Request: if you think the reported issues have acceptable risk and you are not going to make changes then kindly request to mark as Informative or let me close it. I'm not sure if this is the normal behavior of the page, but i thought i would be a good idea reporting to you...
OLX: Stored XSS in buy topup OLX Gold Credits
in this link: https://www.olx.ph/payment/wallet/topupaccount/ 1.input in 2 name: " onfocus=prompt1 autofocus bad=" 2.Select a payment 3.tick I accept OLX's Terms and Conditions 4.Click Continue Then go back to this page https://www.olx.ph/payment/wallet/topupaccount/, XSS :...
OLX: Able to list user's public name, username, phone number, address, facebook ID...
Hi, Through api-v2/items you can list all information of users except email. As items are sequential, you can just make a script that crawls items from: https://www.olx.com.ar/api-v2/items/822200000 to https://www.olx.com.ar/api-v2/items/901858309 Example of sensible user information from random...
olx.com.eg XSS vulnerability
Vulnerable URL: https://olx.com.eg/en/adding/ Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 3114 VIP website status:| Yes Check olx.com.eg SSL connection:| Grade: F Coordinated Disclosure Timeline: Description|...
OLX: full path disclosure vulnerability at https://security.olx.com/*
in form of html comment it disclosing full path of file name Security.html in all https://security.olx.com/ links...
OLX: [Critical] Delete any account
Hi Guys i found a vulnerable endpoint the can deletes any logged in user the vulnerable url is olx.com/myaccount/delete/ with only one parameter called removehash POST /account/register/ HTTP/1.1 Host: olx.com.eg User-Agent: Mozilla/5.0 Macintosh; Intel Mac OS X 10.7; rv:47.0 Gecko/20100101...
OLX: these are my old reports and still i have not receive any good replys, these all are Cross Site Scripting(XSS) issues: POC1: https://www.youtube.com/w
these are my old reports and still i have not receive any good replys, these all are Cross Site ScriptingXSS issues: POC1: https://www.youtube.com/watch?v=zpckM4AjeWk POC2: https://www.youtube.com/watch?v=L4hWJfIdow POC3: https://youtu.be/vWqVpPbn0AI , i am waiting for good reply... DETAILS:...
OLX: Unauthorised access to olx.in user accounts.
Me and my friend, Ekansh, have found a severe security bug in your website, http://olx.in. Using this loophole one can gain full access to user accounts and perform actions like add/edit/delete ads and even delete the account itself. Please find below attached video report and an accompanying pdf...
OLX: XSS on Home page olx.com.ar via auto save search text
Hi guys, I found XSS vulnerability on Home page olx.com.ar via auto save search text 1. Copy full link and go to the URL in browser: https://www.olx.com.ar/nf/search/xss%22-'%20%22%3E%3Ciframe/src%20////onload%20=%20alertdocument.cookie%20onerror=alertdocument.cookie 2. Click logo button go back ...