Another XSS vulnerability and Paypal shows no response

http://seclists.org/fulldisclosure/2013/May/182

by a1a • 13 years ago

18 4 13 years ago

tptacek• 13 years ago

This looks like the same XSS vulnerability with different country codes, which makes the title perhaps a little misleading.

a1a• 13 years ago

The title was copied from the post, I did not see this before posting. Inspecting it further, he says: "I found out that 13 more countries are affected with this xss attack." The country-codes are obviously just handled as another parameter while the vulnerable code is the same on all of them. I am sorry if I helped to cause more confusion, but again - I just copy/pasted.

EDIT: I have updated the title.

kemo• 13 years ago

More like... 1 vulnerability

geeknik• 13 years ago

I don't know why people have trouble getting a response from PayPal.. I submitted an XSS and a CRLF injection issue over the holiday weekend and got a response this morning.

Another XSS vulnerability and Paypal shows no response

Related Stories