ok.ru · Report #77904
cross siite scripting in the blog
Validstatus
7upvotes
17 Apr 2017disclosed
Summary
@cyberboy reported the following issue:
Well your domain http://blog.ok.ru/ gets redirected to http://insideok.ru which seems to be your domain as well . I confirmed that by making a whois check up.
The search parameter has a reflected cross site scripting vulnerability in it
The direct URL of the bug is as below
http://insideok.ru/search/dev?q=<svg onload=prompt(0)>
How it was found
The write-up for this report has not been downloaded yet, or the program disclosed it without one. Read it on HackerOne.