So recently i was testing a web site .I searched bike in the search bar and got the following response.
So to escape all the TAGS i tried the following
i got following response
<b><font size="2" color="#df3d20" face="Arial">Your search: <b></b></font></b>bike Found 0 item(s)
next i tried the following attack vector
</b></font></b><img src=x onerror=prompt(1)>
and this was the response
I think this site is vulnerable.It looks like i have escaped all the tags.Can anyone suggest something
So i tried this and it worked
<img onmouseover="alert(1)" onmouseout="normalImg(this)" border="0" src="http://d2fbmjy3x0sdua.cloudfront.net/cdn/farfuture/hSDgO-dX1na9VZajH8LUXXZbZFW0DYjcPLDuabM2-1c/mtime:1486670171/sites/default/files/styles/nas_bird_teaser_illustration/public/4995_Sib
i get a popup .But i still dont get why pages crashes when i put onerror oralert(1)
I have one more question ........ when i use the following payload ,i get a pop up....
but if i close SRC attribute inside double quote(which is the correct way)the page crashes
and where does all these closing
</div> tags came from.They weren't here before when i searched simple terms like "bike"