how i found xss in lenovo asset?

hi everyone i am back with another writeup.

this time i explain “how i found the xss on lenovo domain”.

i hope its helpful for you. before starting our topic, I clarifying

regarding my content writing here:

“i never share other hackers vulnerabilities findings here.

everything i shared here is only my own findings.”

lets start our topic:

this XSS was finding in with in 1 hour after watching some other

hacker xss finding video. its very simple to find the xss.

more websites still vulnerable for this xss. i will explain clearly

how to find this, with help of google dorks.

Dork: inurl:”/irj/portal/”

this is the dork for finding particular endpoint. this endpoint is under

SAP. i know you thinking………… what is SAP? right!

this is the answer :

“SAP CRM, or Customer Relationship Management, is a software solution that helps businesses manage their customer relationships. It helps companies gather, store, and analyze customer data to improve their customer experience and sales.”

if you want more info regarding SAP.go through below attached link.

“https://www.sap.com/”