Showing posts from August 2016

Wednesday, 24 August 2016

Wednesday, 24 August 2016

Hostgator Open Redirection And Reflected XSS Vulnerability

Hostgator Open Redirection And Reflected XSS Vulnerability




Host gator was found vulnerable to Open Redirection & Reflected XSS

Vulnerable URL - https://www.hostgator.in/login.php?action=successful_login&newurl=http://google.com

Vulnerable Parameter = newurl

Impact : Allow attackers to trick the users to redirection to other(attacker) domain which can be use for phishing attacks. Etc.

Tuesday, 23 August 2016