Hanno's projects · Report #434670
Text injection at https://media.hboeck.de
N/Astatus
lowseverity
1upvotes
22 Mar 2019disclosed
How it was found
Text injection possible at https://media.hboeck.de
if we craft url like this:
https://media.hboeck.de/?c=http://www.example.com
We can see the output on web app.
Impact
Defacement of website by following crafted link