Another XSS injection in Rambler.
Based on
habratopik . I decided to look at other search services of the Rambler,
FTP-Search turned out to be
vulnerableAlas, having fixed in one place they forgot in the rest ...
UPD . I was very surprised at the number of search engines that couldn’t handle such garbage (Au.ru, Webalta) ...
')
Source: https://habr.com/ru/post/47679/
All Articles