kaanatmacaa/pdf-injection

need to fix this

Opened this issue · 1 comments

the script only alert number like 1,2 or many but its not alert character like documet.cookie or domain bcz in poc we need to show them impact ! dm me in twitter if u know how to alert document.cookie @coffinxp7

dude that wont happend this was discovered in 2020 . in portswigger they kept a article about it. Earlier there used be redirection and ssrf too.But it got patched now. I submitted this bug in 2017's in most of bb progrms and they asked the same thing which I researched for days but did not get anything out of this