[supacush7]

Hi guys, as title, i found a non persistant xss on a pretty famous site in italy (based on alexarank, top 50 in Italy). I e-mailed the webmaster reporting the issue, but they didn't answer to me nor fixed the problem, what am i supposed to do? Should i reveal the vulnerability? I mean, if they don't answer i guess they don't consider it as a risky problem and actually they may be right. Just to let you know, this site is in some way linked to ebay 😖

🤝

and sorry for my english.

[supacush7]

I e-mailed them more than 2 weeks ago, and yeah actually what i will probably do is contacting e-bay, or maybe i will e-mail them again since i did it only once, maybe they missed it or something like that.

[SohnGottes]

I have yet to find a webmaster that actually answers emails about vulnerabilities on his webpage. Some don't seem to care at all, even though anybody can access their whole database, others just fix the bug without even a simple "thank you". I mean come on... it's 30 seconds work to answer an email. Not really motivating to tell webmasters about vulns.....

[supacush7]

I have yet to find a webmaster that actually answers emails about vulnerabilities on his webpage. Some don't seem to care at all, even though anybody can access their whole database, others just fix the bug without even a simple "thank you". I mean come on... it's 30 seconds work to answer an email. Not really motivating to tell webmasters about vulns.....

Exactly what i thought, even if they didn't answer to me, i expected them to fix the issue, but they didn't, meh nevermind, i will find a way to contact them once more, if they ignore me again i will let it go.

🤝

Thanks for the answers.

[Sodapoppin]

these ass holes admin never get there job done correctly. i was in same situation . i mailed the admin but they not even replied with thankyou... these things kills motivation

I know right, found XSS on one of the biggest news paper in sweden, but ofc they didnt reply on the email :( But they fixed it lal, no reward and no thank you.