HexBrain

Udemy · Report #87588

XSS Vulnerability

Validstatus
3upvotes
9 Nov 2015disclosed

How it was found

Hi,

I just want to report a XSS Vulnerability

POC:

Fire up LIVEHTTPHEADERS and capture the request

  • I upload 2015-08-24_162829.png as my file name

-After capturing the request, rename you image into '"><img src=x onerror=alert(1)> as payload

This report was disclosed publicly on HackerOne and belongs to its author and the program. See the original