Proof Of Concept Nokia Cross Site Scripting

Hello Guy z

This Is Adesh Nandkishor Kolte An Independent Security Researcher From India

This Article on My Recent Finding of Nokia Web Application Vulnerability which is Affected by cross Site Scripting

While Enumerating Nokia I got a subdomain and found cross Site Scripting

in Search Box that was not properly validated for input , got parameter

S_FULLTEXT= Here i tried for Xss and BOOM GOT

Vulnerable Resource :

Vulnerable Parameter :


Vulnerable URL:

As a reward Nokia Gave me Hall Of Fame

Thanks For Reading