DEFTCODE( 2 )

GPG - 2048R/6D378CAF

Disclosure: Reflect and Stored XSS in eBay Motors

Description

During my research I’ve found a Multiple Cross-site Scriping in eBay Motors.

eBay Motors is a specialty site on eBay that gives you the research, selection, and security to confidently purchase vehicles and parts from across the street or across the country.

Proof of Concept of Stored XSS:

Proof of Concept of Reflect XSS:

Example demostration screen

eBay Stored Cross-site Scriping

eBay Stored XSS

eBay Reflect Cross-site Scriping

eBay Reflect XSS

Disclosure:

Acknowledgement

Thanks eBay Security Team for the Acknowledgement.