Open Redirect in My.Symantec.com

Hello friends here is my POC on an open redirect vulnerability which i found in my.symantec.com

POC Video :-

https://my.symantec.com/webapp/faces/login?returnURL=https://google.com.pk&_afrLoop=1110059547150000&_afrWindowMode=0&_afrWindowId=null#!@@?_afrWindowId=null&_afrLoop=1110059547150000&ct=us&lg=en&returnURL=https://google.com.pk&_afrWindowMode=0&_adf.ctrl-state=dt2azqybk_86

Vulnerable Paremeter " returnURL= "

Share on Google Plus

Unknown

About Unknown

Hi , This is Osama Mahmood and i will share all my knowledge and skills on #infosec with you and hope you will enjoy learning new and unique things. follow me on twitter @OsamaMahmood007