HexBrain

HackerOne · Report #67929

Redirection Page throwing error instead of redirecting to site

Validstatus
3upvotes
25 May 2016disclosed

How it was found

Hello

I was just testing and found that http://anysite.com.com/index.php?ref="><svg/onload=window.onerror=alert;throw/XSS/;// does not shows the usual External link warning page, but shows some error page .

Thanks

This report was disclosed publicly on HackerOne and belongs to its author and the program. See the original