thomascook.com Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-184958 Security Researcher tbm Helped patch 2374 vulnerabilities Received 6 Coordinated Disclosure badges Received 6 recommendations , a holder of 6 badges for responsible and coordinated disclosure, found a security vulnerability affecting thomascook.com website and its...

notes.de.thomascook.com XSS vulnerability

Vulnerable URL: https://notes.de.thomascook.com/fb-db/finance/runz.nsf/webAnmeldung?OpenForm=ES=%22%3E%3Csvg/onload=prompt%28/OPENBUGBOUNTY/%29%3E Details: Description| Value ---|--- Patched:| Yes, at 19.08.2016 Latest check for patch:| 19.08.2016 13:59 GMT Vulnerability type:| XSS Vulnerability...

alpha.thomascook.com XSS vulnerability

Vulnerable URL: http://alpha.thomascook.com/travel-money/buy-australian-dollars/?dbTrail==%27-prompt%28%27OPENBUGBOUNTY%27%29-%27 Details: Description| Value ---|--- Patched:| Yes, at 11.08.2016 Latest check for patch:| 11.08.2016 20:01 GMT Vulnerability type:| XSS Vulnerability status:| Publicly...

cruise.thomascook.com XSS vulnerability

Vulnerable URL: https://cruise.thomascook.com/emailus.rvlx?message=%3C/select%3E%3Cbody/onpageshow=prompt%28/OPENBUGBOUNTY/%29%3E Details: Description| Value ---|--- Patched:| Yes, at 11.10.2016 Latest check for patch:| 11.10.2016 13:21 GMT Vulnerability type:| XSS Vulnerability status:| Publicly...

thomascook.com XSS vulnerability

Vulnerable URL: http://www.thomascook.com/tv/category/featured-destinations/canary-islands/?orderby=comment=%22%3E%3Csvg/onload=prompt%28/OPENBUGBOUNTY/%29%3E Details: Description| Value ---|--- Patched:| Yes, at 05.08.2016 Latest check for patch:| 05.08.2016 11:42 GMT Vulnerability type:| XSS...

Thomas Cook Travel Insight - Corrupted files, Dynamic Code Loading, External URLs vulnerabilities

HackApp vulnerability scanner discovered that application Thomas Cook Travel Insight published at the 'play' market has multiple vulnerabilities...

Thomas Cook Travelguide - ContentProvider mode not defined, Dynamic Code Loading, External URLs vulnerabilities

HackApp vulnerability scanner discovered that application Thomas Cook Travelguide published at the 'play' market has multiple vulnerabilities...

Unfixed XSS vulnerability at booking12.thomascook.de

Security researcher Venom23, has submitted on 10/10/2007 a cross-site-scripting XSS vulnerability affecting booking12.thomascook.de, which at the time of submission ranked 62181 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 13/10/2007. It is...