HexBrain

Informatica · Report #106678

[now.informatica.com] Reflective XSS

Validstatus
highseverity
5upvotes
9 Dec 2016disclosed

How it was found

XSS vulnerability lies on http://now.informatica.com/launch-next-bigdata-registration-inxpo.html?Source=homepage

#POC

  • Sign up for big data management Virtual launch event

  • on parameter company_name inject '"><img src=x onerror=alert(1)>

This report was disclosed publicly on HackerOne and belongs to its author and the program. See the original