Lucene search
+L

1 matches found

Hacker One
Hacker One
added 2020/11/17 4:35 p.m.69 views

U.S. Dept Of Defense: Blind stored XSS due to insecure contact form at https://█████.mil leads to leakage of session token and

Summary: I have discovered a blind stored cross site scripting vulnerability due to an insecure Contact form available here https://███████.mil/ This form does not properly sanitize user input allowing for the insertion and submission of dangerous characters such as angle brackets. I was able to...

SaveExploits0
Rows per page
Query Builder