tfl.com Cross Site Scripting vulnerability OBB-3606072

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

tfl.com Cross Site Scripting vulnerability OBB-3424577

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

tfl.com Cross Site Scripting vulnerability OBB-3390967

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

tfl.com XSS vulnerability

Open Bug Bounty ID: OBB-454708 Description| Value ---|--- Affected Website:| tfl.com Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat Sheet...

tfl.com XSS vulnerability

Vulnerable URL: http://www.tfl.com/en/login/;jsessionid=03661D78DBE9C00518D6040D73CE06AC?loginokurl=/en/chemicals/chemical-finder/pevit-xcb-5471.jsp?term=xss"'--! Details: Description| Value ---|--- Patched:| No Latest check for patch:| 08.08.2017 Vulnerability type:| XSS Vulnerability status:|...

tfl.com XSS vulnerability

Vulnerable URL: http://www.tfl.com/en/login/;jsessionid=03661D78DBE9C00518D6040D73CE06AC?loginokurl=%2fen%2fchemicals%2fchemical-finder%2fpevit-xcb-5471.jsp?term=xss%22%3E%20%3C/form%3E%3Cscript%3Ealert%22OPENBUGBOUNTY%22;%3C/script%3E&%22 Details: Description| Value ---|--- Patched:| Yes, at...