AOH :: HP Unsorted V :: B06-2429.HTM

Vodafone.de xss vulnerability



Vodafone.de XSS Vulnerability
Vodafone.de XSS Vulnerability



There's a little vulnerability in the post section of:
http://www.vodafone.de/business/support_download/77278.html

Sending a malicious code will result a code working on the page that pops up...

https://www.vodafone.de/simlock/servlets/sim?IMEI=[XSS CODE HERE]

example:
https://www.vodafone.de/simlock/servlets/sim?IMEI= 

The entire AOH site is optimized to look best in Firefox® 3 on a widescreen monitor (1440x900 or better).
Site design & layout copyright © 1986-2014 AOH
We do not send spam. If you have received spam bearing an artofhacking.com email address, please forward it with full headers to abuse@artofhacking.com.