Mail.ru: Account Takeover at vseapteki.ru

Insufficient protection against SMS code bruteforcing allowed account takeover in vseapteki.ru Common flaws of SMS auth: https://blog.deteact.com/common-flaws-of-sms-auth/...

Mail.ru: XSS

Reflected XSS in vseapteki.ru via URI path...

Mail.ru: Cross-site Scripting (XSS) - Reflected vseapteki.ru

Reflected XSS via GET parameters in vseapteki.ru...