[Mr.Kurd]

In The Name Of Allah
Al-Salam Alekum

What do you think?!
https://cxsecurity.com/issue/WLB-2017090127
Isn't it XSS?!

Wa Salam Alekum

[Mr.Kurd]

[mothered]

Moved to the Website & Server Hacking forum.

I'm running late for lunch and logging off Immediately after this post, I shall have a look later tonight.

[mothered]

What do you think?!
https://cxsecurity.com/issue/WLB-2017090127
Isn't it XSS?!

Are you actually referring to this?

 '=''or'

If so, It's an SQLi command that exploits a security vulnerability In the database, by Injecting the command Into the SQL Statement(s) via Input from the form-based login page. I don't know why they've made a big deal out of It. It's a very basic form of exploitation.

[Mr.Kurd]

What do you think?!
https://cxsecurity.com/issue/WLB-2017090127
Isn't it XSS?!

Are you actually referring to this?

'=''or'

If so, It's an SQLi command that exploits a security vulnerability In the database, by Injecting the command Into the SQL Statement(s) via Input from the form-based login page. I don't know why they've made a big deal out of It. It's a very basic form of exploitation.

Let me ask again
I opened that link above, then that alert appeared for me, so I asked if it is or not XSS.

[Anime!]

What do you think?!
https://cxsecurity.com/issue/WLB-2017090127
Isn't it XSS?!

Are you actually referring to this?

'=''or'

If so, It's an SQLi command that exploits a security vulnerability In the database, by Injecting the command Into the SQL Statement(s) via Input from the form-based login page. I don't know why they've made a big deal out of It. It's a very basic form of exploitation.

Let me ask again
I opened that link above, then that alert appeared for me, so I asked if it is or not XSS.

Didn't pop up for me. Could have been a bunch of things.

[mothered]

Let me ask again  
I opened that link above, then that alert appeared for me, so I asked if it is or not XSS.

As with @Anime! above, upon clicking the link nothing happened on my end.

Without experiencing the alert/popup, It's not possible to say the type of vulnerability (If any).

[Mr.Kurd]

Let me ask again
I opened that link above, then that alert appeared for me, so I asked if it is or not XSS.

As with @Anime! above, upon clicking the link nothing happened on my end.

Without experiencing the alert/popup, It's not possible to say the type of vulnerability (If any).

I didn't get the alert on my PC but I'm still getting that alert on my Phone.
My Phone browser version is old, so it seems to be XSS for me.

[Bish0pQ]

An alert doesn't necessarily mean that you can perform an XSS attack, though it's obvious a script is executed. To be sure what script is executed and if you can change it requires very little resource and if you find the right script you can easily check if xss is possible by changing the alert text or running a different simple script.

[Mr.Kurd]

An alert doesn't necessarily mean that you can perform an XSS attack, though it's obvious a script is executed. To be sure what script is executed and if you can change it requires very little resource and if you find the right script you can easily check if xss is possible by changing the alert text or running a different simple script.

Yep, my bro. Thank you.