Html Injection On One Of The Indian Government’s Official Domain

Hi, Everyone.
Today im going to share the story that how i got the html injection vulnerability on Indian Government website.

First of all, i used some dorks to find login/register pages of Indian government.

dorks used-
site:*.*gov.in inurl:register

and i found a link:
https://smsheader.trai.gov.in/loginpage

on that page there is a field named “Fill your basic information” and there is two option one is for email and the another one is for email address.after filling the email option …

bug bounty bug-bounty-tips bugbounty-writeup domain government html html injection injection official