ok.ru · Report #78003
Cross site scripting On api Calculator API requests
Validstatus
3upvotes
17 Feb 2016disclosed
Summary
API request calculator at https://apiok.ru/wiki/pages/viewpage.action?pageId=75989046 did not validate application_secret_key and session_secret_key values, which resulted in XSS.
How it was found
The write-up for this report has not been downloaded yet, or the program disclosed it without one. Read it on HackerOne.