krigsbilder.net Cross Site Scripting vulnerability

2019-11-2109:25:00

Dipu1A

www.openbugbounty.org

JSON

Open Bug Bounty ID: OBB-1020624

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:

&nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence;
&nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence.

Affected Website:	krigsbilder.net
Open Bug Bounty Program:	Create your bounty program now. It’s open and free.
Vulnerable Application:	Custom Code
Vulnerability Type:	XSS (Cross Site Scripting) / CWE-79
CVSSv3 Score:	6.1 [CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N]
Disclosure Standard:	Coordinated Disclosure based on ISO 29147 guidelines
Discovered and Reported by:	Dipu1A
Remediation Guide:	OWASP XSS Prevention Cheat Sheet
Export Vulnerability Data:	Bugzilla Vulnerability Data
JIRA Vulnerability Data [ Configuration ]
Mantis Vulnerability Data
Splunk Vulnerability Data
XML Vulnerability Data [ XSD ]

Vulnerable URL:

![](data:image/png;base64, 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)

Research’s Comment:

![](data:image/png;base64, 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)

Screenshot: krigsbilder.net vulnerability

Mirror: Click here to view the mirror

Coordinated Disclosure Timeline

Vulnerability Reported:	21 November, 2019 09:25 GMT
Vulnerability Verified:	21 November, 2019 09:31 GMT
Website Operator Notified:	21 November, 2019 09:31 GMT
a. Using the ISO 29147 guidelines
—	—
b. Using publicly available security contacts
c. Using Open Bug Bounty notification framework
d. Using security contacts provided by the researcher
Public Report Published
[without any technical details]:	21 November, 2019 09:31 GMT

JSON