Informatica · Report #1081656
Html injection on ██████.informatica.com via search.html?q=1
Summary
Researcher identified an injection vulnerability on a staging website. We responded by fixing the issue on both staging and production instances of the site.
We would like to thank the researcher for responsibly disclosing the issue to us.
How it was found
hello dear
I have found HTML injection on ██████.informatica.com
parameters injectable search.html?q=1
URL : https://████████.informatica.com/search.html?q=1%22%3E%3Cimg%20src=https://www.no-gods-no-masters.com/images_designs/anonymous-gandhi-d001001207265.png%3E%E2%80%[email protected]%20%22
payload ; 1"><img src=https://www.no-gods-no-masters.com/images_designs/anonymous-gandhi-d001001207265.png>”@x.y "
https://█████.informatica.com/search.html?q=1%3Ca%20href=%22//bf.am%22%3EWelcome%3C/a%3E
payload : <a href="//bf.am">Welcome</a>
Impact
Phising
Abusing other user
Defacing