Timeline for Close XSS vulnerability
Current License: CC BY-SA 3.0
6 events
| when toggle format | what | by | license | comment | |
|---|---|---|---|---|---|
| Jul 13, 2015 at 6:21 | vote | accept | wasp256 | ||
| Jun 22, 2015 at 21:39 | comment | added | wasp256 | Thanks for the answer, considering the fact that this is a search field that simply replies with a list of results, how could it even be exploited with XSS? | |
| Jun 19, 2015 at 16:19 | comment | added | r00t | The source seems to show the GET variable as-is. For me it's vulnerable. Why do you think that it's a false positive ? | |
| Jun 17, 2015 at 21:41 | history | edited | schroeder♦ | CC BY-SA 3.0 |
edited body
|
| Jun 17, 2015 at 21:25 | comment | added | wasp256 |
The content of the source is <a href="/search?text="><script>alert('Found')</script>
|
|
| Jun 17, 2015 at 21:22 | history | answered | schroeder♦ | CC BY-SA 3.0 |