Acronis · Report #859395
Reflected XSS on http://www.grouplogic.com/files/glidownload/verify.asp
Validstatus
lowseverity
84upvotes
13 Apr 2021disclosed
Summary
Here is my twitter address: https://twitter.com/alicanact60 Don't forget to follow me :)
How it was found
Hello there, I hope you are well!
As I see, Group Logic is your subsidary and www.grouplogic.com is a managed website by Acronis. {F803772}
I found a reflected xss on http://www.grouplogic.com/ PoC: http://www.grouplogic.com/files/glidownload/verify.asp?version=AC12%27%3E%3Cimg%20src=v%20onerror=alert(document.domain)%3E
Impact
Reflected XSS
Best Regards, @mygf