Arcabit (Subscription renewal service) vulnerable to XSS

Arcabit (Subscription renewal service) - XSS

Vulnerable page: https://www.arcabit.pl/pre-renew.html

PoC
"><img src=http://www.te-home.net/gallery/xssd_by_teamelite.png>



It is enough to insert any XSS code directly into serial field and your code will be executed and displayed immediately.

Note: This is a proof of concept and it doesn't reflect the views or interests of above website.
Posted by Neo on 2017-05-07 20:223 likes

Comments

There are no comments for this news article, you can write one here.