Quote from: bob123 on Today at 08:44:54 AM

Quote from: Quickseller on June 19, 2020, 05:29:42 PM

Did you responsibly disclose the vulnerability to the site owner? Or did you first publish this report publicly?

According to this:

Quote from: Boris007 on June 18, 2020, 01:55:19 PM

Why don't you try it yourself??
1. Go to: https://analyzer.nastyfans.org/?s=1
2. Inside the search, paste:

Code:

"><script>alert('Boris007 was here')</script>

3. Press submit and see the XXS being execute.

I believe he initially posted it here and calls that a "responsible disclosure".

I wonder whether he got the permission to look for vulnerabilities from the server owner/administrator and hoster.

Quote from: hacker1001101001 on Today at 05:48:21 AM

This question still matter's as it's not good look or practice at testing vulnerabilities on such website's without the owner's knowledge.

OP should have atleast notified OgNasty before injecting any scripts.

It is not just "not good", but illegal.

The requested person was informed before disclosing it here.