Another XSS vulnerability and Paypal shows no response

Posted by a1a on Tuesday May 28, 2013 @08:07AM
from the seclists.org dept.

http://seclists.org/fulldisclosure/2013/May/182

( 4 comments | 18 points | on HN )

Re:Another XSS vulnerability and Paypal shows no response by tptacek on Tuesday May 28, 2013 @08:28AM (#5779516)

This looks like the same XSS vulnerability with different country codes, which makes the title perhaps a little misleading.

[ Parent | on HN ]

Re:Another XSS vulnerability and Paypal shows no response by a1a on Tuesday May 28, 2013 @09:23AM (#5779811)

The title was copied from the post, I did not see this before posting. Inspecting it further, he says: "I found out that 13 more countries are affected with this xss attack." The country-codes are obviously just handled as another parameter while the vulnerable code is the same on all of them. I am sorry if I helped to cause more confusion, but again - I just copy/pasted.

EDIT: I have updated the title.

[ Parent | on HN ]

Re:Another XSS vulnerability and Paypal shows no response by geeknik on Tuesday May 28, 2013 @02:28PM (#5781712)

I don't know why people have trouble getting a response from PayPal.. I submitted an XSS and a CRLF injection issue over the holiday weekend and got a response this morning.

[ Parent | on HN ]

Re:Another XSS vulnerability and Paypal shows no response by kemo on Tuesday May 28, 2013 @09:00AM (#5779667)

More like... 1 vulnerability

[ Parent | on HN ]