Cross site script (XSS) is a web Application flaws that allows remote attackers to steal cookies,session hijacking, redirect to malicious site and remote reverse connection.
www.shine.com is a job portal that allows job seekers and employers to get on one platform. making easier for both employer as well as job seeker.
shine.com is vulnerable to XSS, this is my poc for XSS in shine.com
shine.com is having three input field. first is "Type job title,skills,etc" and second "Type desired job location" this two field are vulnerable to XSS
Bug
Report:
1.Reflected
XSS
Step 1:
Open www.shine.com
Step 2:
Select the Search text box (Type
job title, skill etc)
Step
3:
insert
attack payload '”><script>alert(“Hacked!!!”);</script>
affected : http://www.shine.com/job-search/
Attack
type is client side reflected xss.
Same
attack is possible on Second search text box
Reflected
xss in search box (Type desired location)
Step
1: Open www.shine.com
Step
2: in search box (Type
job title, skill etc)
Step
3: insert attack payload '”><script>alert(“Repeated
here”);</script>
affected URL: http://www.shine.com/job-search/
Persistence/stored
xss in search box (Type job title, skill etc)
Step
1: Open www.shine.com
Step
2: login with user name/ password
Step
3:
Click
on search
box (Type
job title, skill etc)
Step
4:
insert attack payload '”><script>alert(“document.cookie”);</script>
affected URL: http://www.shine.com/myshine/home/
When logged on the search text get stored as user previous search, this
causes persistence xss attack.
This poc was reported to site, no reply yet!!!
