XSS using ref Parameter

**You are viewing our old website - new website soon...!**

We are getting close to releasing BugBountyHunter v2 which will introduce a brand new website, including member platforms, new features, challenges, guides, videos, and the long awaited zseano methodology v2. Right now, all of the content on this website is considered out-dated, however our members section continues to operate for members.

Stay tuned for updates coming soon!

FirstBlood-#93 — XSS using ref Parameter
This issue was discovered on FirstBlood v1

This report has been reviewed and accepted as a valid vulnerability on FirstBlood!

On 2021-05-10, mava Level 2 reported:


        Hi zseano,
I found a reflected XSS inside Firstblood.
PoC

Visit: http://firstbloodhackers.com:49331/register.php?ref=1%27AutoFocus/ContentEditable/OnFocusIn==confirm,(document.domain)//


Impact
This vulnerability allows an attacker to execute arbitrary Javascript code.
Fix
The parameter must be sanitized correctly.  
Best regards,

Max

This report has been publicly disclosed for everyone to view

P3 Medium

Endpoint: /register.php

Parameter: ref

Payload: 1%27AutoFocus/ContentEditable/OnFocusIn=_=confirm,_(1)//

FirstBlood ID: 4
Vulnerability Type: Reflective XSS

The parameter "ref" is vulnerable to XSS on register.php. The developer made use of htmlentities but this is inadequate as the HREF is wrapped in single quotes.

Report Feedback

@zseano

Creator & Administrator

Nice find ! :)