DOM XSS italiastartupvisa.mise.gov.it (coor. disc.)

Your experience of helping website owners
Post Reply
evaristegal0is
Posts:19
Joined:Mon Feb 20, 2017 5:14 pm
DOM XSS italiastartupvisa.mise.gov.it (coor. disc.)

Post by evaristegal0is » Fri Jul 07, 2017 6:27 am

Copy this URL in Chrome, mobile or desktop it is the same.

italiastartupvisa.mise.gov.it/#"><img src=x onerror=prompt('OPENBUGBOUNTY')>

A message box will appear. For some reason it can't pass the manual checking.
(from Android phone I can't attach a screenshot because the forum says me "file too large")

User avatar
x1admin
Site Admin
Posts:3101
Joined:Sun Nov 15, 2015 7:04 pm

Re: DOM XSS italiastartupvisa.mise.gov.it (coor. disc.)

Post by x1admin » Fri Jul 07, 2017 12:08 pm

evaristegal0is wrote:
Fri Jul 07, 2017 6:27 am
Copy this URL in Chrome, mobile or desktop it is the same.

italiastartupvisa.mise.gov.it/#"><img src=x onerror=prompt('OPENBUGBOUNTY')>

A message box will appear. For some reason it can't pass the manual checking.
(from Android phone I can't attach a screenshot because the forum says me "file too large")
rechecked and approved

Post Reply

Who is online

Users browsing this forum: No registered users and 2 guests