Lucene search

K
openbugbountyVighneshGuptaOBB:1041450
HistoryDec 18, 2019 - 7:20 a.m.

cls.ru Cross Site Scripting vulnerability

2019-12-1807:20:00
VighneshGupta
www.openbugbounty.org
8

Security Researcher VighneshGupta Helped patch 131 vulnerabilities
Received 3 Coordinated Disclosure badges
Received 2 recommendations , a holder of 3 badges for responsible and coordinated disclosure, found a security vulnerability affectingcls.ru
website and its users.

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:

&nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence;
&nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence.

Affected Website: cls.ru
Open Bug Bounty Program: Create your bounty program now. It’s open and free.
Vulnerable Application: Custom Code
Vulnerability Type: XSS (Cross Site Scripting) / CWE-79
CVSSv3 Score: 6.1 [CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N]
Disclosure Standard: Coordinated Disclosure based on ISO 29147 guidelines
Discovered and Reported by: **VighneshGupta Helped patch 131 vulnerabilities
Received 3 Coordinated Disclosure badges
Received 2 recommendations **
Remediation Guide: OWASP XSS Prevention Cheat Sheet
Export Vulnerability Data: Bugzilla Vulnerability Data
JIRA Vulnerability Data [ Configuration ]
Mantis Vulnerability Data
Splunk Vulnerability Data
XML Vulnerability Data [ XSD ]

Vulnerable URL:

![](data:image/png;base64, iVBORw0KGgoAAAANSUhEUgAAAiEAAAAjCAIAAADNIk3yAAAACXBIWXMAAA7EAAAOxAGVKw4bAAAMc0lEQVR4nO2cf0wT5x/Hz1qgtFcVbKu2JRZcqiGOLQsjLGM/gokzhhiWoWYbm3Ujji3MNIQ58I+t4w9cGLLMLIQsLGGJmf5BjOEP4gwxS9M0/mDd2TUMGzTQVWSkICUn3mrlvn/cd09ud89dj45rwX1ef/V5+tzz+Xzez+e5T+/hwjqWZQkAAAAAUAFNth0AAAAAnligxgAAAABqATUGAAAAUAuoMQAAAIBaQI0BAAAA1AJqDAAAAKAWq6LGFBcX37x5U6qZXWdWCavTqyePmzdvfvjhh9n2Ym3w6NGjN998888//1Q4HnL4v0n2a8xvv/22tLT0zDPPYJvZdWaVsDq9eiJxuVwOhyPbXqwNcnJycnNzW1palAyGHP7PkqLGTE5OGo1G7FfxePzUqVNSTeUMDg4eOHBAqqnQmZVCxrpKKAkKeXX//v2jR4+azWabzfbpp58+evQoPVuTk5MFBQVp+5weSiJNO4vSzg2+xdnZ2WAw6Ha7sfNnXrE0kBFQLBE/qMnJyXU8ioqK2traUIJJyet2u4eHh5U4tiI7S9UUAlQi/eeY+fn5jo4OqaZylNeYDJBd61Igr1wuVyKRoCjqypUrfr//s88+y7Zry2D79u2xWEx+TNpZlDZ8izRN6/X6vLy8TDqwsvwbAUmSZBiGYZjFxcWhoaGff/65vb1d/pLCwkKappVMviI7a3WmECBPls/K7t27Fw6HX331VWwzu86sEpBXDx8+DAQC3333nc1m27lzZ3d398DAwLKm0mq1TqeT/yHDrOnb93+BvLy8vLy8/Pz8p59+uqura7kJJsUK7ixIoTWHohrzzTffFBcXb968+Z133onH4wRBxONxh8NB0/S6det++OEHfrO7u9toNH711VdbtmwpKCg4cuTIw4cPpWYeHBzcu3dvTk6OuPn48eO2trYtW7YYDIaDBw/Ozs4Krr1x48ZLL71kNBptNtsbb7zx+++/CwZwT9anTp0ym83btm37/vvvBc/aggMQvnXs5H/99df7779vNBq3b9/++eefP378GHnywgsv5Ofnm83mgwcP3r17F2tdJiixwmKv8vPz//jjD4PBwPWPj49brVaCIO7evfvaa68ZDIYdO3Z8/fXXMkc6Npvtl19+4T5cu3aN6/zpp5+kxiPQGKws2KBkxOc+iDNEkFRSvmHVFoBdKbFLYot8OGGNRuPOnTt//PFH1P/gwYMPPvjAbDYXFRV98cUXKA3EOkjlG9d/+vTp4uJig8Fw+PDh2dnZTz75xGw2b968+ejRow8ePEgZCHd5QUHB22+/jd2VKZdVHp1OxzBM2pfz1y7lziKk1VMjhYBMkrrG0DRNUZTf779+/frU1FRraytBEBs3bhwbG+Meruvr6/nN119/nabp69evj4yMjIyMBAKBzs5OqcllDso6OzuHh4eHh4fD4bDVah0dHRVcW1NT43K5IpGIz+erqqrS6XRY58fGxkKhUH9/f1VVlXykfOvYydvb2xcXF4PB4KVLl7xeb29vLzc4EAgcO3Zseno6FArZ7fampiYp69igsApLScRx69atlpaWrq4ugiCampo2bNgwNjZ2+fLl/v5+NMYsAhu1y+Xas2cPV3vE3LhxY8+ePS6XS0YWqZWSER+bIYKkkvJNSm0+UislcElskQ8n7Ojo6NDQEL/GHD9+fGpqKhAIXLp0aXBwsKenh+tPmbECBSiK8vl8FEVNTU3t2rUrFosFg8GrV69OTEycPHkyZSDBYJDLmUgkwo2XD2dZxONxj8ezf//+NK4V5AyhYGcR0ltDjRQCMgory8TEBEEQCwsLXNPv95eUlKCvSJLkj+Sa3CWRSITrv3DhQnl5Ofc5Eok4HA50CU3TJEnOzc1hmxaLJRAICJxBFufm5rRaLcMwKZ1HE2J93rRpk9i61OQmk4mmae4zRVEVFRVio+Pj41u3bsValwpKSmGxJhzRaLSkpOT8+fMsyyaTSZ1Ox1cbRRQVgVWJpumOjo7CwsJDhw6Fw2HUHw6HDx06VFhY2NHRwUUtJYs4KGz4SjJEsEBSviH4avMvxK4UdkX4F/I/SwmbTCZJkrxz5w7XPzg4WFlZKaWDVL5xnszPz3P9Pp9Po9EsLi5yTb/f/9RTT6UMBOWMz+eT2pUyzrD/zH9uTtPf5ObmvvXWW8i01LSCfnHOsMp2lpR6GUghQG20KYsQSZLoed9qtc7NzaW8RKfTFRUVcZ937doViUTQ5X6/Hw27fPlyRUUFOtvhN+Px+NzcXFlZmZSJgoKCurq6ysrK6upqq9VaXl7+yiuvYJ1X+DoQ3zp28vv378diMfRi69LSklb7f/V+/fXXEydOjI6OJhKJpaWlpaUlrHWpoGQUFkjEUVdX53a7Dx8+TBDEzMwMQRB8tdEwm82mJHCDwdDW1tbY2Pjee++VlpaiV4lKS0tramru3LmzceNGrgcri8xKyYgvlSFKfJNSGyGzUsrzQUrYmZmZRCJRXFyM+rn7XcqMFUCSJBLWbrdv2LAhPz+fa1qtVu4v2/KBoJyx2+1KdmVK9Ho9RVEEQQwPD7e2tvb19SGXFCLOGULBziJkt4YaKQRkkoz+zX/9+vXbtm1DzZRvlK1fv15mtnPnzvX19ZWVlSUSiebm5o8//vjf+CawLp6cYRiNRjMyMkJRFEVRwWCQ25AEQdTW1r788ster5eiqKGhIXlD8kHJe0UQxL1794LBoJJgFZ6VEQRx+/btpqYmr9fLf4+ovb3d6/V+9NFHt2/fRp1Smi8rqGUh9i2l2jIrpTYrq8PKBqLX6xmGQX89Iv5+jw41NRqNzWaz2WxHjhwxmUx9fX3LNYHNmZQ7C32lUhZh0xvIHPKPOTKHSwrPyi5evIgeY/kkk0mTyYTOHARNlmUtFgtFUTLO8KEoym63yzvPsuzCwoJGo+EfMqADEIF17OQkSYoPhWZmZrRaLX8wOg8Re5syKL7CWK+SySS/R3Ckc/HixeWelTU2NpIk2dzcHIvFBF/FYjG3202SZGNjo/hCJIs4KGz4SjJEcJXYN4VqY1cKuyIKz8qQsPJnZQIdpPJNZtEFTSWByOxKARaLxefzoWZPT8++ffuwF54/f95ut6NDLYVnZawoZxTuLFbZfl+RFAIyTPo1hqZprVaLjjhRk1v+urq6aDQaCoWeffZZj8eDZkBZ6/V6d+/ejfoFTZZlOzo6KioqgsFgNBrlfoYsLCxotdqxsbFkMjk6Orpv374rV67EYrFIJNLQ0FBTUyMwgd0YFRUVDQ0N09PT4XC4qqqKC0dgXWryxsbGysrKUCg0NTXV2dnZ3t7OjbdYLD09PfPz8+FwuLa2VqbGiIOSUVisiSBAjtraWr7a/LuVEurr6ycmJmQGTExM1NfXy8giDgobvuAGgc0QQVJhfcOqzc8NVmKlsCvCtxiJRHQ6XUphGxoaDhw4EIlEQqHQc889d+bMGa4fqwM235TXGCWByOxKQap8++23TqfT6/XGYrGBgYHCwkJUcsTilJaW9vb28r9l/kkymRwfH8fmG8oZhTsLq556KQRkkvRrDMuyHo9Hr9f39/fzm6dPnyZJ8ssvv7RYLJs2bXr33XfRHzP5s7W0tJw8eRJNJWiyLJtMJk+cOGEymXQ6XW1tLfczpLW1lbOYSCQ8Ho/T6czNzbVYLPX19dPT0wIT2HvK+Ph4dXU1SZKlpaVnzpzhwhFYl5qcYRi322232/V6/f79+9GvM6/XW15ertPptm7d2tzcLFNjxEHJKCzWRLwELMtGo9G9e/fq9fqSkpKurq7l1hjlSMmCXSn5G4RUhrCipBKDVZvl5QYrsVJSP8aRRYZhdDoduj1xwpIk6XQ6+cLSNH3s2DGTyWS32z0eD1fVpHTA5pvyGqMkEKldiY23u7vb4XDk5ubu3r37woUL4tVBnD171uFwJBIJ9u97uoDe3t6BgYGysjKplWIV7yyseuqlEJBJUtSYNJB/Wkc4nc6rV69KNTNMdq1LkYZX4gq0ClGYIVnh+PHj1dXV2fZibcAwjMPh6Ovrkxmj0s5azSkECEj9XplK3Lp1S6aZYbJrXYrV6dWTTVdXV8ZeEFjr5OXlnT179sUXX5QZAzkMZP//LgPA6iEnJ+f555/PthdrBvkCAwAE1BgAAABAPdaxLJttHwAAAIAnE3iOAQAAANQCagwAAACgFlBjAAAAALWAGgMAAACoBdQYAAAAQC2gxgAAAABqATUGAAAAUAuoMQAAAIBaQI0BAAAA1AJqDAAAAKAW/wO6GWcn0G8lgAAAAABJRU5ErkJggg==)

HTTP POST data:

![](data:image/png;base64, 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)

Research’s Comment:

![](data:image/png;base64, iVBORw0KGgoAAAANSUhEUgAAAiEAAACbCAIAAAA7u9zqAAAACXBIWXMAAA7EAAAOxAGVKw4bAAAgAElEQVR4nO2de1AUV9bAWxhggBkewzAgjOFRFrqWiyxhCbpIiLEMEoqaKCpBIq5SylKohHItJC6ZqIUE0UoISygXq9B1jbVlsYS1KNaajRYhbIKIIyIiEoXhIeJAGDLiMIz090dv+uvt9wy0PDy/v6Zv33vuuede+tC3u89ZhKIoAgAAAAACYDfbCgAAAAALFvAxAAAAgFCAjwEAAACEAnwMAAAAIBTgYwAAAAChAB8DAAAACAX4GAAAAEAowMcAAAAAQsHtY37++ecDBw4EBAQ4OzsvW7bs008/ffHiBYIgBoPhxIkTwmlmrfyenp5FBJYsWXL48OHJyUnhNJwphLYkAADAbMHtY3bt2qXT6a5evarT6crKyurq6lpaWhAEGR0dLSgoEE4zG+RLJBKTyWQymcbHx2tra69fv3706FGB1JtBhLYkAADAbLGIPZbM8+fP3dzc9Hq9u7s76VRPT8/KlSt//vlngTSzVj61/nfffZeenn7v3j1hFJwxhLYkAADAbMFxHzM1NYUgiEgkIpUbDIbAwECj0bho0aJz584hCDIxMbF7926pVBoQEPDxxx9j+2k9PT1SqfTkyZM+Pj6enp5paWnPnz/HJNy4cWPt2rVSqdTf33/z5s0kT0CS/+zZs71793p7ey9ZsuSTTz7BhHMiFotNJhOTbgiCPH78+N1335VKpUFBQadOnfL09MTKqfWxgZw6dSooKMjT03P79u0GgwHviKn+iRMnvL29Fy9efPbsWXzUq1evdnZ29vb23rJlS39/P09LAgAAzEc4fIyrq2t8fHxycvJ333337NkzvNzd3b2jowPbm0pNTUUQ5OjRo+Pj462trXV1dfX19eXl5VhNo9HY1NTU3Nzc3Nzc0tJSVFSElSckJOzcuVOn0zU0NERHR4vFYmK/JPn79+8fGBhoaWmpq6urqakpKyvjHJjBYFCr1fHx8Sy6ZWVlOTo6dnV1aTSa8+fP421p6xuNxtbW1sbGxqamJp1Ol5eXx1m/o6Ojra2tsrIyOjoaq9nS0rJnz57BwcG2tjalUpmVlcXfkgAAAPMPlIuxsbHc3NyQkBCRSLR06VK1Wm2xWFAU7e7ulkgkeDW5XG40GrHfWq02MjISq4MgiE6nw8qrqqoiIiJQFB0ZGRGJRCaTiaVfXL7FYpFIJA8fPsTKa2pqoqKiaOsjCCL/BUdHx5SUFEwlWt0sFotYLMbFVlVVeXh4MI0FEz42NoYVNjQ0BAcHs4wdqz8yMsIywK6uLl9fX56WRFFUp9MFBgayCAQAAJhrkDfBqGB7PidOnJiYmGhpacnJybFYLMeOHSPW+emnn/R6fWBgIHY4NTWFb6+JxeIlS5Zgv5cvX67T6RAE8fT0TEpKioqKWrdunZ+fX0RExJtvvsmkwNDQkNlsDgoKwoVgV3AqLi4uWq0WQRCNRpObm1tRUeHs7Myk29DQ0NTUFFEs+1gkEolUKsUKlUrlyMgIZ3188w3n1q1bhw4dam9vN5vNU1NT2FYkT0v6+fk1NjZiv729vfEmT58+ZTIdAADA7MLtY3CcnJxWr15dUlKSmppK8jEmk8nOzq65uRm/INrZcezCffXVVzdv3mxraxsYGMjJyVmzZs0XX3xhrfYk7Ozs/P39EQRJS0srLi6uqKjYt2+ftbrR1jebzTNSX6VSpaenl5eXi8Xivr6+uLg4PtKwH/b29osXL8Z+Y64UAABgjsPtY549e+bq6oofmkwmi8VCqrN48WIXF5eRkZHf/OY3pFMmk6m3txe7lens7HzttdfwU6+//vrrr7+OIEh8fHxCQgKTj1EoFI6Ojo8ePcLuOTo6OvB/81k4cuTIwYMH9+zZw6SbQqGws7Pr6ekJCAjAxLKMpaenh6kj/vWfPn06MDDwpz/9CTvU6/U8pVHBXCkAAMAch+Nu4/79+8HBwX/5y18eP35sMBi+/fbbzMzM9PR0BEHkcrnJZHrw4AFWMzU1NTMz8+7du48fPz558iTxRicnJ6e/v//u3btqtTohIQFBkHv37m3cuPHatWvDw8O9vb2lpaVhYWGkrnH59vb2ycnJ2dnZvb29mJCUlBTOgW3bts3Nza2yspJJN3t7+4SEhOzs7J6eHkws3pZlLLTwrO/t7S2Tyb788kuDwfDgwQO8R/6WnJiY4Bw4AADAHILziU1tbW1sbKybm5uLi0toaOiZM2fwU2q12sXFpbKyEkVRk8mUnZ2tVCpdXFzi4+OxZ+nY0+zCwkKFQuHh4bFjx47x8XEURc1ms1qtDgkJcXR0VCgUqampg4OD1K5x+Uajcc+ePXK5XKlU4i8dkCA9OUdR9MKFC4GBgWazmVY3FEUHBwcTEhIkEklgYGBhYSH+zJ9anyS8u7sbr8ynPk59fX1ERIRYLPb19c3JycGFcFqSdoAAAABzHI5vMKfJPPq68P79+zExMU+ePJltRQAAABYOEBPzv2i12uDg4NnWAgAAYEHxSvuYY8eOnT179unTpz/88ENeXl5GRsZsazQPCAoKun37NtPh7Coz95l3CgPANHmlfUxsbGxZWZlSqcRCCaSlpc22RnOdO3fuTE1NrVq1ivZwdpWZ+8w7hQFg+vDyMRMTE++//z7+BSI7X3zxRVBQkKur6xtvvNHV1SX0w5gnT55IpVJiuLO//e1vy5Yt4xPma+3atTdv3pyYmHjw4MGBAwdYan7wwQfECt9++62DgwMxZNmbb775+eef07bFYpdxj4SuslVh/1k6IsmxOZtATU1NYmIi0yFPZWYKlt6niUDKC6cwAMxdON8KMJlMsbGxSUlJfF5qKikpCQ4O/uabb/R6/eXLl+VyeUNDwwy8msBKdnb2jh078MPQ0FDsBa0Z5MyZM+Hh4fhhfn4+giBVVVXYodlsFovFWq2Wtq2174MRQ+xY1ZalMvW9ONteUYuMjLx69SrTIU9lZgqW3qcPe6Aj2xBUYQCYm3D7mO7u7uPHj/O8ZPj5+X3zzTf4YXl5eUJCwrQU5MHAwIBEIunu7kZRtLa2Njg4mPbl5unQ2dkpEonweGVr1qwJDQ3NysrCDhsaGoivMpOYztV2TvmYgYEBDw8Ps9lMe8hfmRmBvfc5yLxTGABmBG4fg8HnkjE6OoogCPGvyGw2Y5d+FEU5v3GhrYD1W1xcHBgY6OHhkZKSMjo6Su06KysrMzMTRdGYmBj8Cx4WgcRxYe4BKy8oKJDL5b6+vhUVFaQu/Pz86urqUBQdGxsTi8U1NTXLly/HThUWFiYmJqIoajKZdu3aJZFIXnvttfz8fGKP1I+EUBRtamqKjo6WSCR+fn6bNm1qb28nqofZE6OyspJWOHWOPvvss8DAQJlMlpqaitmKJId4eOrUKYlEUlRURNWNSnl5+datW2kPLRZLbm6uQqFwcXFJSkrS6/UkO1NHSqs80f7s3yQRe6cVzjIXxF62bt16/PhxXGxUVFRlZSWxa+rQsHKm6WAaKcl6APCKMJPP/I1Go1gsdnBwwEscHBywSC0IgnDG52eqwBJUHyc3N/fixYtff/11d3f3zp07efZI1Z8ajR8nNja2oaEBQZDr16+HhYXFxcX19fX19/cjCNLQ0BAbG4uwJjho/gWbExzwiflvNBq1Wi1mq4GBgdzcXKoc4uF7773HlHyBCsvDmKKiIo1Go9FoOjs7/fz82tvbSW3ZR8rH/izK0ApnmQtiL1u3bq2ursZOPX78WKvVqlQqYkdMQ2OSzzRSeBgDvKLw9EV87mOIdQ4ePIjF2Mdi4HPG52eqwB5Un0hGRoZYLC4rK+MUyHQfg7BG4z9z5kxsbCyKotnZ2fn5+SiKJiQkYA9+ZDJZc3MzOhMJDlg2tZhi/hMrE23V2NiI24pJLJNuKCWVgNFolEgkuH1IhwqFoqWlhWkgPFM5kOzPch9D7J1JOMtcEHsZHx93c3PDLFBWVobdjxK7pg6NRT6TMiRzAcCrgxVxlzkRiUR4uMwjR45kZ2fjoYU54/OzVGAKqk8iMzOzsrJy165dnAKZoI3GjxMTE5OdnT05OanRaLBbog0bNmg0mvDwcIvFEhYWJmiCAxbhpCHgtvLz82OyFRFa3ZD/TSWAIMjVq1cjIyNx+xAPDQbDyMhIaGgoUxc8R8pufyLE3mmFs5iL1Iuzs3N8fHx1dfW+ffuqqqrwm2AMpqExyWcaKcl6APDqMJM+Btt+mZycdHBwcHd3d3d3HxoacnFxmcEuWHBzcxOJRE5OTgLJX7ZsmYeHR21trU6ni4qKQhBk/fr1hYWFa9asiY6Otre3n5EEBwcPHqStaYPwaUJMJYDweGvZ3t6eRdrMpnIg9U4VnpeXx99cW7duLS0tTU1NbWpqqqqqolagDo1lOmhHChtlwKsLz/sd/u+VXb9+HT8sLi6Oi4tDp7dXxvLgl0VDJoFjY2N2dnbEzTfiM3/20SUnJ4eFhRHflFMqlWFhYUVFRdihRCKh7quQ9qOqq6vx/SgiWq1WqVSy7JXRCmexANFWPPfKmHSzWCxyuRw3JukQRVGFQkF6dZvFnthI2ZVHmWeK2jutcKa5oGplMplkMtlnn322adMmajXq0DA4pwNXhl1hAFjY2OhjmPbW8e9jhoaGLly4IJPJGhsbsVPp6emJiYk6na6trS08PLykpITUlraCzT6GpcfIyMj09PTBwcHOzs7o6Gj+PgZ7rkvUHNtaaWpqwg4zMjKioqKw/2GLioqOHj2K/nIdT0pK6uvra2trCwsLU6vVKIq2t7fHxcVh3xLpdLr09PSEhASSGkajUSQSdXZ2MglnsQDpAQYuh3jIpBsGPsv19fUrV67Ey0mHKIoWFBRERka2trb29fVlZWXV19ePjY2JRKKOjg6LxUI7UlIXtPannSlS70zCmeaCdpZTUlLc3Nz+/ve/U5WhDo1lrmmVoZoLAF4dbPEx7JfjkpKSwMBAR0fH8PBw4rcy03l3magGfx/D1GNXV9e6deskEsmKFStKSkr4+xgsjxnxvduLFy9KJBJcMkuCA+r7wbQJDqhq4GH/mWL+M1mAZCti+gD8EHt3mfa9atIbHHl5ebgo0iGKohaL5dChQ3K5XCwWq1Qq7AXf3NxcrEemVA6ci4p2pki9MwlnmQvqzFZXV0skEtqx0w6NST6tMlRzAcCrg7Cx/YE5Ds/kC8uWLTt//vwbb7xBe/iSmd3ebWDeKQwAMwj4mFeaeZTgBwCA+cgrHXcZAAAAEBTwMQAAAIBQcPuYp0+fbt++3cvLy9/f/8MPP5yYmOAjdzrR0W2OPC+EcGJ9pkG9hDj2VnVEO0batgEBAUwbZXwGPtfgo+fcGUtPT8/sfpVJNAXT7+kg6B8yMF/g9jE7duwQi8VtbW319fWtra1HjhwRWqfR0dGCgoI5IpxP/YCAAL1ePz29eMGzI1qdrVVS0FkA5gJCr1tYQgDC+Z3/s2fPrl+/rtfrXV1dEQQpLCxMSUk5efLkS9FtPiFcfIEZ7OilKQnMF2BJAELDcR/j6ur6/PlzzMEgCGI2mx0dHa3qgHTfTdwfuHHjxtq1a6VSqb+//+bNm7FclgaDITAw0Gg0Llq06Ny5cyQ5J0+e9PHx8fT0TEtLe/78OS5n9erVzs7O3t7eW7ZswWIh08qnCp+YmNi9e7dUKg0ICPj4449J2TNplfn888+DgoK8vLw++OADLBUmaYy04+I8++LFi8OHD/v4+Li6um7ZsmV4eBgTe+LECW9v78WLF589e5a6oUE1CLsBib9PnToVFBTk6em5fft2Yk5P/gPHYLch05CZWtHOJtUUtBZj15PIp59+ymch0fZLGhqTtrTm7e/vf+edd6RS6bJlyy5evEhV7M9//vM777yDH3700UdpaWnPnj3bu3evt7f3kiVLPvnkE8xWLH9ZOO+99x7+H+Ht27ednJxwTfbu3bt3715r98QeP3787rvvSqXSoKCgU6dO4T1SZ5NpHbLYDViQWPfM//jx4zt27JipvmmjoJMC0RPrM0Whb2lp2bNnz+DgYFtbm1KpzMrKYpJPFc4eMJ9anzZ4Pp9xcZ6ljSHPHu6e1iAsBiS1ZcmYYNXAOZMOWBV7n2k2qaZgshjnBDGlWqDtmn0KWLSlNW9WVpabm1t7e3ttbS2tj1GpVPX19fhDspqamk2bNlmbpYJoeY1Gg/2+cuXK1NRUXV0ddqjRaN566y2ecnCysrIcHR27uro0Gs358+fxcupssq9DJrsBCxD+n2uq1er169fzTDFJjIhF+/E5S7x32o+xWaLQE+nq6vL19WWRTxLOJ2A+8Vt0hC54Pv849ixnacPjI8zh7lkMwmRApoHQZkzgM3AMdhtaFXufBD6btJkXmCzGpCexDs+FxJnxgUVbqnktFotYLCZ2TRu0Iioq6vLly+gvUzA+Pm5zKL+BgQEXFxfM+JGRkTk5OSkpKVhlNze3rq4u2jgLTNEQMP1xTYj6M2VS4BPkELcbsCDhG3f566+/Pn/+fFNTE3t4Xf5YFdkegykK/a1btw4dOtTe3m42m6empqampnjK5xkwnwhn8Hz2fpnOMsWQZw93z2QQPvDMmEBbnzhwThtaG3ufdjYRiilYLMaZ3cCqhcQ+BSzaUs07NDSEIAixa1qZKpXqypUrmzdvvnLlSnx8/OjoqLVZKnAWL14cEhLS2Ni4YsWKgYGB/Pz8kJCQFy9eaDSa9evXc652EkNDQ1NTU0RNsB82/B0x2Q1YePBaZHfv3s3IyKirq/Py8uIp12w2c66zmYr3rlKp0tPTy8vLxWIxnrGGj3yBAuaz98tydqb898uEjw2tir3PNJu0zKzFrOra5iacbNq0CduUu3LlCimfjQ3Ex8drNJqHDx8mJCS4u7uHhYXV19drNJr4+Pjpq4phw9+REHYD5iicdzojIyNLly69ePGiVfdH1dXV4eHhKHOEdhLEeO989srwKPRDQ0MikYgoh10+SbhVAfNZcmhaFcee9iyf8Pgse2XEsPx89so4t1n41+cT5Z46ZNpWTLNJOyJOizGNi/9CYt/t4aktrgZpr6y6upopwOvKlSs1Go2Hh8fY2Ji1WSpINDY2RkZGJiYm1tbWoihaVla2f/9+X1/fgYEBpilm3yvr7u7GDol7ZfwzKbDYDViQcPgYi8Wyfv36/fv3mwigDLH9r169WlFRodfrm5qali9fXl5ejpXTRmhnifdOCkSPwRKFXqFQlJWVjY6OdnZ2qlQqdvkk4ZwB84n1+fgYlnGxn6XGkOfjY2gNwmRAq3wMn4HzsaFVsfeZZpP2asVpMRYfw3MhcT5R4KMtUQ2VSkXsmunamp+fHxoaiq8Nq7JU0CqpUCiwv9m+vj43N7ewsDCSnsRcDMTfJFFJSUkqlaq7u7utrS00NBTvkXY2adchi92ABQmHj6Hu/LL84X3//ffR0dESiWTp0qWnT5/Gy2kjtDOFZMcgBaJHf/l7oI1CX19fHxERIRaLfX19c3JyOOUThXMGzCfW5+Nj2MfFcpYaQ57TxzAZhMWA1N8ow7WYz8Ax2G1oVex9lGE2aZccp8VY7s+oqRZou+b0MXy0JarR19e3YcMGiUQSEhJSXFzMdG3VarUIguDTZ1WWCiopKSlJSUn4YUREBJZrgKQnnouB9JvI4OBgQkKCRCIJDAwsLCzEe2SaTeo6ZLEbsCCZN3GXIUIwCTDIAubZs2dyuXxgYGB2g82wc//+/ZiYmCdPnsy2IsCcBmJiAsCc4+rVq9HR0XPZwSAIotVqg4ODZ1sLYK5j3cuLAAAIjcFgKC0tTU5Onm1FaDh27Jifn19iYuLDhw/z8vLy8/NnWyNgrgP3MQAwt8AfFM22IjTExsaWlZUplcrU1NT9+/enpaXNtkbAXGfePI8BAAAA5h1wHwMAAAAIBfgYAAAAQCjAxwAAAABCweFjWLK2UHNasFQmCSQeYi9o8mkLAAAAzC+472OYsrbQ5rRgqsyH6bQFAAAA5iLsYQCYkm3Qxunjk5mDJRwLZ1sAAABgfsF9H0ObbGNoaIg2p8V0MppMpy0AAAAwB4Fn/gAAAIBQcPsYk8nU29uL/e7s7HzttdcQBFEoFI6Ojo8ePcLKOzo6sCx4tJWJyGSy8fFxPJJjX18fe0cAAADA/IXXfUxOTk5/f//du3fVanVCQgKCIPb29snJydnZ2b29vVh5SkoKU2UiUqk0IiIiJyfnyZMnDx48yM3NZe8IAAAAmL9w+xiJRBIREREeHh4dHR0aGnro0CGs/LPPPvP19Q0PD4+Li0tMTMzMzGSpTOTixYsPHz5cunSpSqXaunUrZ0cAAADAPIUjXplVSUqmk9EEsqEAAAAsPOCZPwAAACAU4GMAAAAAoQAfAwAAAAgFh48JCAhgekby4YcfOjs7nzt3jk9lTqbTFgAAAJib2JijbHh4WKFQtLS0rFy50t7efsbVAgAAABYAItuaGY1GFxeXVatWzaw2AAAAwEKC+3kMNYb/8PBwYGCg0WhctGgRca/s0aNHrq6ut27dQhBkeHjY09Pz2rVrCILcuHFj7dq1UqnU399/8+bN9+7dw+ozlQMAAAALA24fQ43h7+Xl1dHRIZFITCZTamoqXjMoKCgvLy87OxtBkPz8/Pj4+LfeegtBkISEhJ07d+p0uoaGhujoaLFYjNVnKgcAAAAWBhzPY168eOHh4dHa2oqFWP7nP/9ZUFDwn//8h+mTycnJydDQ0OTk5NLS0ra2Nh8fn59++kmhUBiNRicnJ2JNpnIAAABgwcDxPIYphj8TDg4OpaWl69evLykp8fHxQRDE09MzKSkpKipq3bp1fn5+ERERb775Jks5AAAAsGCY+e9jBgcH7ezsBgcH8ZKvvvqqoqIiNDTUbDbn5OTs27ePvRwAAABYILCnMKPNd4lS0lnijI6O+vr6Xrp0SSaTtbe3UytotVqlUsm/HAAAAJi/cNzHsMTwpyUvLy8mJmbbtm05OTlYJOZ79+5t3Ljx2rVrw8PDvb29paWlYWFhLOUAAADAgoF7r4w2hj8tN2/ePH/+fHFxMYIgBw8e7O7u/utf/7p06dKoqKiMjAzsoYvJZKqoqEAQhKkcAAAAWDDY+J0/AAAAAHACMTEBAAAAoQAfMy1u3779hz/8Yba1mDdMTk6+//77T5484VM5KCjo9u3bQqsEAICggI+ZFjt37gwMDJxtLeYNDg4Ojo6OBw8e5Kx5586dqakpCIgHAPMdDh/T09MjlUqxH56eni9FJXLX7BgMhhMnTggknL274eHh1tZWLHYOVf5LNpfNMBmQaiLioHp6ehYRWLJkyeHDhycnJ5na4mRnZ2s0Gk6tampqEhMTrRsJBUGXEAAAfJi79zEBAQF6vZ6z2ujoaEFBwUvQh9odFnx6vsfCsdmAWMA6k8k0Pj5eW1t7/fr1o0ePcraSyWRGo5Gz2oz4mLm5hADglYLDx4hEopCQEOKPl8l8v3wveJycnJycnJydnX/9618XFxdfvnx5RsQ+fvy4s7MzNjZ2+qJgCQHA7MLhY/z9/W/evIn9+OGHH7DCf/3rX+yt8ApM0ftfvHhx+PBhHx8fV1fXLVu2DA8PY9saJ06c8Pb2Xrx48dmzZ4kbHdjvkydP+vj4eHp6pqWlPX/+HEEQg8FAzDLApNiNGzdWr17t7Ozs7e29ZcuW/v5+ap2JiYndu3dLpdKAgICPP/74xYsXVJVI3ZEk9Pf3v/POO1KpdNmyZRcvXsTLqckR2I2ANyTtTUml0lOnTgUFBbm6um7btm14ePiPf/yjt7e3l5fX73//+2fPnjENhNTc09Nz+/btBoOBakD2aWVHLBabTCabmxPnrqamZsOGDQ4ODtgh7SoSaAkhPJY3AAD8sWWvbOfOnW+//Tbme0jcuHHj7bff3rlzJ3bIFL2/qKhIo9FoNJrOzk4/P7/29nYEQYxGY0dHR1tbW2VlZXR0NEmy0Whsampqbm5ubm5uaWkpKipCEMTd3Z2YZYBJsZaWlj179gwODra1tSmVyqysLKrmR48eHR8fb21traurq6+vLy8vp6pE6o4kISsry83Nrb29vba2luhjqMkRWIzAgtFo1Gq1DQ0NWq12YGBg+fLler2+tbX1+++/7+7uzsvLYxkI1ry1tbWxsbGpqUmn02H12UfEH4PBoFar4+PjbWhLWjMIZaOMdhUJtIQQ1uUNAIDV2BB/xmg0FhQUyGSyrVu3dnZ2YoWdnZ1bt26VyWQFBQVGoxFF0ZGREZFIZDKZqBKwPM3EEiyc88jICLEED4mGndXpdNhhVVVVREQEtRqtYiS6urp8fX2p8dbkcjmmNoqiWq02MjKSqhJVK/y3xWIRi8VEDT08PFDmgG9MRiBq1d3djQnBLTA6OoodNjQ02NnZjY+PY4eNjY1Lly5lGgjefGxsDG8eHBxM2ymTMrT6yH/B0dExJSUF75dJJukUdc2gKGo0GiUSCW52plUk0BJC+a0iAAB4YkuuZVdX18OHD2dkZOzatWvFihXY20QrVqxISEh4+PChu7s7Vo0per/BYBgZGQkNDSWJlUgkLO9iicXiJUuWYL+XL1+u0+l4KoYgyK1btw4dOtTe3m42m6empqampkgNf/rpJ71ej7+FPDU1JRKJOFUiMjQ0hCAIUUO8nDY5ApMRWJBIJLhtlUqlm5ubs7Mzdujn54c93GYaCNYc3zhSKpUjIyP8u6bFxcVFq9UiCKLRaHJzcysqKnB9eEJdMwiCXL16NTIyEjc77SoSbgkhzKsIAAAbsPG9sh9//DErK6u+vh5/lejo0aP19fWZmZk//vgjXo0ler+9vf109OavGIIgKpUqJiamvr5eq9XW1tZSW5lMJjs7u+bmZq1Wq9VqW1tbsaun0My4EWZwIC4uLiaTCX96hPzyHh1+aGdn5+/v7+/vn5aWJpfLbQg3R7tmqG+UMa0igZYQwrCKAACwBRvufTIyMiQSSU5Ojl6vJ5br9frs7GyJRJKRkUFtRYzer1AotFot8SztzjHVrXsAAArDSURBVAzTRkd1dTXtRgetYkNDQyKRiKiGh4cHtTuJRMK+c0WrFdNeWXV1NZ+9MpIRxsbG7OzsiDtaxL0ppm000iF1IOzNWfa1FApFQ0MDflhWVhYXF0fb6tKlS0qlEt/R4rlXhlLWjMVikcvluLmo4KtIoCWEMi9vAABswBYfk5qa2t3dzXS2u7s7NTUVRdH29va4uLhvvvlGr9frdLr09PSEhASsTkFBQWRkZGtra19fH/YPI58LRFJSUl9fX1tbW1hYmFqtxk4ZjUaRSITtmzMpplAoysrKRkdHOzs7VSqVh4fH2NiYSCTq6OiwWCxYnYyMjKioqLa2toGBgaKioqNHj9JeKInd6XQ6sViMn1KpVEQN8Yt4enp6YmKiTqdra2sLDw8vKSlhMgKKopGRkenp6YODg52dndHR0Tb4GOpA2JsTR4SiKPHJR2lpaUhISH19vV6vv3z5skwmw10O1TgrVqwoLy8nnjX9L5ipu7q6iJrj9bE1U19fv3LlSuIpplUk0BJCuZY3AABWYYuP4YnZbFar1SEhIY6OjgqFIjU1dXBwEDtlsVgOHTokl8vFYrFKpdLr9ZwXCIlEUlhYqFAoPDw8duzYgT/uRlFUrVa7uLhUVlYyaVJfXx8RESEWi319fXNycrBrXG5uLrGVyWTKzs5WKpUuLi7x8fEPHz5k+mcc785kMonFYvza1NfXt2HDBolEEhISUlxcTLyI79mzRy6XK5VKtVqNezWqEVAU7erqWrdunUQiWbFiRUlJiQ0+hjoQzub4iKhDPn36dGBgoKOj48qVK6uqqmhnB+PChQuBgYFmsxn95YJOAvNAly9fDg0NZZqpgwcP5uXlEUuYVtFLXkIAANjG/Ijt39PTs3Llyp9//nm2FSFz4MCBtra2f//737OtyPxgYmJi+fLlR44c2b17N22FZcuWnT9//o033pjxrufsEgKAhY0t75UBOMXFxS/n7YCFgZOT04ULF373u98xVbh///7L1AcAAKGZu/HK5gUODg6//e1vZ1uL+QSLgwEAYOEBPgYAAAAQivnxPAYAAACYj3Dfx9y/f3/jxo3u7u4+Pj67d+/GYikyQUwrYm9vHxQUdOzYMTy+5MypzZcPP/zQ2dn59OnT/HsnZhNhUXu2RvSSIQ3TqlQrNudlefm2ZepxpjTB1uE0o44CwLyE882z4ODg9PT0gYGBvr6+lJSU5ORklsrEDyPGx8exeFlM35oIjV6vt7Oz02q1FouFNmwaLUxfWVLhL3NeQxymVfNo86S//NXC0uP0Z5m4DqcpCgDmHRz3MRMTE/v37z99+vTixYv9/f1zc3MbGho4/RaeVmTVqlWnT5++dOnSDDlE68Bin6xatcre3l6IPCKvSG6SV2SYTEx/+MR1OCMqAcA8gsPHODk5HThwANsumJycvHDhwrp166zqQCwWWywWUiFtjhOEIdELUxIaJiEYw8PDeF4Q4l7Zo0ePXF1db926hdXx9PS8du0a3oo2n8rnn38eFBTk5eX1wQcf4FuFxF0UJg3Zx8uU74RYgjCkn6Gtya4GUxId9lbEYbIkm6EKoVa2atJJsCtJzSWDldOajimdD87du3e9vLy+/fZbhLJXRjsEdt2I6/DcuXM8p5h/uiDamUL+N/kQ/78gWvUAYDrwfa/sH//4h4uLS1NT05kzZ/hLf/r06ZEjR1QqFamcKccJbaIXpiQ0TEIwvLy88Lwg7733Hl4eFBSUl5eXnZ2NIEh+fn58fPxbb72Fn6VmE8GytmBpVwYGBnJzc6nDZNKQc7zUfCfUEqb0M9Sa7GowJdHhVJ7FOCwWoFa2atKtsjBTJh5a0zHZE8NgMGzatKmwsHDt2rVUNWiHwK4bcR3iK4rPFPNMF8QHq/6C2HPwAIDV8NxTGx8fx2JJ4TGpaCGmFZHJZGKxOCMjw2Qykfa7aXOckMASvbAkoeEUgndK6t1sNi9fvlytVsvlcjy8DbUVPhw8SGVjYyM17QqLhuyq0uY7IZUwhdSk1uSjBg5mWz6tqEFoqM8tmITYPOmkhpxKUnPJoAymY7En1mN8fHxmZib/IfAxO3VFcU4x/3RBTKri4YKs+guizZkEANOB73f+zs7Oa9euLSoqOnLkyN69e1lq4mlF7OzsFAoFdQ+aJccJNdELUxIaFiGcODg4lJaWrl+/vqSkxMfHh70yMe2Kn58fNe0Kk4Z8xkvNd0IqYUo/Q63JqQZtEh3OVnzgI8SqSbdKPlMuGVrTsdgTQZCPPvqorq6OKUkB7RBsMCDPKeaTLogP1v4F8c+ZBAB84LguT05OarVa/FP24ODggYEB9iZYWhGWCniOE/wqY2f33y07lUqVnp5eXl4uFov7+vri4uIQBPnqq69u3ryJBRLOyclZs2bNF198wSKED4ODg3Z2doODg/ybsECrIZ/xzizsatDalrPVjHSNWD/p1sqf/uP08fHxqqqqS5cuZWVlbdq0iZg2jX0IM2JAQeH/F2Q2m2dXVWABwn6bYzKZRCIRfu9cU1NDu8WBwzNxL22OE9pEL6Q6xCQ0tEJoOyX1Pjo66uvre+nSJZlM1t7ezqKqDWlXiBqyj5c9TjAG594OEyQ1+NiWVnk+e2VMQmyedPZeqEpSc8mg1u+ViUQibDEkJCRkZWXRjpdzydHOPvvb8Ex7ZTzDbOOwJB9i0pBnziQAmA7c75XFxcVlZmb29/ffvn07Nzd3586dCIJMTExY5clkMpnJZLp//z72Kk5qampmZubdu3cfP3588uTJY8eOIQji7e0tk8m+/PJLg8Hw4MEDtVqNIMi9e/c2btx47dq14eHh3t7e0tLSsLAwTCatED7k5eXFxMRs27YtJycnMzOTdFYul5tMpgcPHvCUxqIhjs2q2tvbJycnZ2dn9/b23r17V61Wp6Sk2KAGrW15Kk+E1jhMQkiV+U86abVwKpmdnb1nz547d+709/fv27cPeyWM1nQs9hSLxb/61a8QBCkuLq6oqLhz5w51+NQhWGtAKvynmB2pVBoREZGTk/PkyZMHDx7gL6fMyF+QtX/vAPD/cHqhoaGh5ORkDw8PpVJ5/Phx1Josh0SI+Vpoc5ygdIleWJLQMAmhKkPUqrm5WSKRYPkQTSZTYGDg+fPnSQ2Z8qnQ3sewaIjDJ6cLk/Vo089Qa3KqQZtEh7MVtSNqqhUWIcTK/Ccd/d/VwqkkbSYeJtPxsef+/ftjYmKo5dQh8Jl9zq96qSrZcB+DMiQfsuoviFY9uLkBpgPEKwMAAACEAuIuAwAAAEIBPgYAAAAQCvAxAAAAgFCAjwEAAACEAnwMAAAAIBTgYwAAAAChAB8DAAAACAX4GAAAAEAowMcAAAAAQgE+BgAAABAK8DEAAACAUICPAQAAAIQCfAwAAAAgFOBjAAAAAKEAHwMAAAAIBfgYAAAAQCjAxwAAAABCAT4GAAAAEArwMQAAAIBQgI8BAAAAhAJ8DAAAACAU4GMAAAAAoQAfAwAAAAgF+BgAAABAKMDHAAAAAEIBPgYAAAAQCvAxAAAAgFCAjwEAAACEAnwMAAAAIBTgYwAAAAChAB8DAAAACAX4GAAAAEAowMcAAAAAQgE+BgAAABAK8DEAAACAUICPAQAAAIQCfAwAAAAgFOBjAAAAAKEAHwMAAAAIBfgYAAAAQCjAxwAAAABCAT4GAAAAEIr/AwbWfQ7bK12uAAAAAElFTkSuQmCC)

Screenshot: cls.ru  vulnerability

Mirror: Click here to view the mirror

Coordinated Disclosure Timeline

Vulnerability Reported: 18 December, 2019 07:20 GMT
Vulnerability Verified: 18 December, 2019 07:30 GMT
Website Operator Notified: 18 December, 2019 07:30 GMT
a. Using the ISO 29147 guidelines
b. Using publicly available security contacts
c. Using Open Bug Bounty notification framework
d. Using security contacts provided by the researcher
Public Report Published
[without any technical details]: 18 December, 2019 07:30 GMT
Public Disclosure: A security researcher can delete the report before public disclosure, afterwards the report cannot be deleted or modified anymore. The researcher can also postpone public disclosure date as long as reasonably required to remediate the vulnerability. 17 March, 2020 07:20 GMT