Lucene search

K
openbugbountyMetamorfosecOBB:1048241
HistoryDec 23, 2019 - 5:32 a.m.

mygatewayproject.eu Cross Site Scripting vulnerability

2019-12-2305:32:00
metamorfosec
www.openbugbounty.org
6

Open Bug Bounty ID: OBB-1048241

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:

&nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence;
&nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence.

Affected Website: mygatewayproject.eu
Open Bug Bounty Program: Create your bounty program now. It’s open and free.
Vulnerable Application: Custom Code
Vulnerability Type: XSS (Cross Site Scripting) / CWE-79
CVSSv3 Score: 6.1 [CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N]
Disclosure Standard: Coordinated Disclosure based on ISO 29147 guidelines
Discovered and Reported by: metamorfosec
Remediation Guide: OWASP XSS Prevention Cheat Sheet
Export Vulnerability Data: Bugzilla Vulnerability Data
JIRA Vulnerability Data [ Configuration ]
Mantis Vulnerability Data
Splunk Vulnerability Data
XML Vulnerability Data [ XSD ]

Vulnerable URL:

![](data:image/png;base64, iVBORw0KGgoAAAANSUhEUgAAAiEAAAA3CAIAAABVZQ1/AAAACXBIWXMAAA7EAAAOxAGVKw4bAAAT7ElEQVR4nO2dfUxT1/vA72opFS5vFSpvzsIcEkZYQ1jHHHOGr3GGEdMh4uYYIhJF4pAQdcgIY4wg8YUoY4QsujBCnH8Q4wgxzjGWNKRTRKyMsI6wWiorHVYEVrUicH9/nHxP7u++tUALfPX5/HXPvec+53nOc3uf3nPuee5LFEURAAAAAOAGREutAAAAAPDcAjEGAAAAcBcQYwAAAAB3ATEGAAAAcBcQYwAAAAB3ATEGAAAAcBfLN8ZERETcuXOHrwgsZ8BZAAAglmmM+f3332dnZ19//XXOIrCcAWcBAIBxEGOGhoZ8fHw4D01MTBw/fpyvuEBaW1u3bdvGV1wcXGvRIiDgLAFcbiZy1vyUQTh57sOHD/fs2RMUFBQWFvbZZ589e/aMWIA5uNGhoaGAgAA36QwALxrzf44ZHx+vqqriKy6Q5RBjXGvRIrB27Vqr1TrXs1xu5sKd5aQh2dnZU1NTOp2uo6NDq9WWlZURS+e1+XU+ADz3LMexspGRkYGBgU2bNnEWAQE8PT2XVgFXOcuhIU+ePOnp6fn222/DwsLWr19fU1PT0tKykBbFYnFUVBR9Y64seecDwDLEqRhz9uzZiIiIVatWffLJJxMTEwRBTExMKBQKm8320ksvff/99/RiTU2Nj4/PyZMnV69eHRAQsHv37idPniA5N2/efOedd3x8fMLCwrZv3/7HH39wNtfa2rplyxYPDw9GEQ1HnD59OiIiwtvbe+fOnQ8ePDhy5EhQUNCqVav27Nnz6NEjgiC++eab9957D0v7/PPPd+/eTRDEyMjI+++/7+PjExERcfr0aTwecvPmzbfeemvlypVBQUE7duz4+++/2QYSBPH06dO9e/f6+PisXbv2iy++mJmZ+eCDD06ePImE3Llzx9PTE3UOQRD79+8/cuQIp3BO9ZBp7E5D+48fPx4UFBQSEnL+/HmCIB49erR///6goKA1a9Z8+eWXMzMzSBQermGriirMzMwcO3Zs9erV3t7eO3bsePDgAdtMOpxyGINCjJElhu8wfDpzOoXeBN3pAQEBH3/8MerklStX3rt3z9vbG1UbHBwMDQ1lm8PXLpuwsLBbt26hjRs3bqCdP/30E199RgX6UJszVymf7QzYPxnOS4LtWT6F79696+3tffv2bYIgHjx4EBAQ8OuvvwrbCAALghLEaDQSBJGdnW02mwcHB5OTk/Py8tAhvV5PkqTdbp+enqYXDQYDQRDp6ekmk2lwcDA2Nra8vBydIpfLz507NzY2ZjAYampqDAYDZ6MpKSnNzc3sIlImMzNzeHh4YGAgKSkpMDAQ6Yb+OxcUFFAUNTw8LJVKJycn0emxsbGXL1+mKCotLU2tVlsslsHBwbi4OH9/f1ShoaHhu+++Gx8ft1gshYWFarWa08CSkpIPP/zQYDD09/dv2rSprq7u3LlzW7ZsQZUrKyvFYvHFixdRMTIysqOjg1M4p3rINHanof1ZWVkWi+Xq1at6vZ6iqJycnNTUVJPJ1NfXFx8fX1tbi51FkiSnqqhCVVVVQkJCb2/v8PBwQUGBRqNhm0mHUw5uBTeKe5LhLHo1Pp05nUI/F/cA8nJSUlJ+fj5DT71eHxoa2tXVxTaHs91AFpzXIUVRwcHBycnJ3d3d7ENdXV3JycnBwcGMznfyKuWznQH7J8N5SXB6ls/SysrKjRs3UhSVn5+/a9cuPtsBwCU4FWPwDVGr1UZGRuJDjHsN/TdmMpnQ/kuXLiUkJFAUNTY2JhaL7XY7uxWTyaRQKNC2zWYjSXJsbIxdRJLHx8fRoc7OTpFI9PjxY6zbunXr0HZiYmJLSwvWCt1xpFIpjmqXLl3i/EkPDg6y7xqIwMBAm82GtnU6nUqlMpvNXl5eyCKVSlVUVIR+sUaj0dfXd2pqik84Wz2+TkP7cW9QFDU9PU2SJDaktbU1MTGRoTBbVbQtl8t7enoYWjHMpMMpRyDGMJyFq/HpzOcUdozBV2BnZye+AhHDw8ORkZE4ujvT7jALTvORRVVVVTKZLCMjY2BgAO0cGBjIyMiQyWRVVVW4fxjXv8Or1JkLkvMnw74kKB7P8lk6NTUVHR1dXl4eGBhosVj4bAcAlyB2+KBDkiQeuAgNDR0bG3N4ilQqXbNmDdqOjo42mUwEQQQEBKSnpycmJiYnJ4eGhiYkJLz77rtYrFarRdvXrl1TqVR43IBRJEnSz88PbYeHh/v6+q5cuRILwZOuarW6ra1t+/btbW1tKSkpnp6eIyMjs7OzERERWCus7e3bt48ePdrf3z81NTU7Ozs7O8u26OHDh1arVaFQoOLs7KxYLA4JCYmKitJqtTExMWazuaysLCoqamZmpr29ffPmzWi8iFM4Wz2+TkMm00dRRkdHp6am6Iagm46wqgRBTExMjI2NxcXF8fvNscnCpzCc5VDn0dFRPqfQoV+B4eHhjCswPT29sLBw586d7BP52g0LCxM2BOPt7X3s2LG8vLycnJyYmBj06lpMTExqaqrBYMCXIlthh1epM7bz/WQYl4SAZzkt9fDwqKur27x5c21t7erVq53sCgCYH45jjAv54Ycfbt261dfXZzabi4qKNmzY8PXXXxMEsWLFipCQEFTHJW+UpaWlJSUlEQTR1taWnZ0tXFmtVufm5jY0NEil0uHh4a1bt7Lr2O12kUjU3d2N77MikYggiJSUlPb2doPBkJqa6ufnp1QqNRpNe3t7SkqKgPA5qTdX+FRFrFixwiVyOFn81/9GRkZ6e3t/++23OZ0VFBTE2HP//n2+yn/99VdZWZlGo6moqEB7KioqTp06lZ+fX1FR8corr8xV5znB/skcPnyYsyanZ/kstVgsIpHIYrG4XGEAYCL8mCMwMOLkWNnly5fRsA8DnU4XHh7O2Dk9PR0YGIgHEBhF4ZkARjE2Nra9vd3f3x8Ns6ChCaPRiI7ioYnR0VGxWEzXis9AkiTZwxFarValUm3btu3KlSsURdXX1xcUFAQHB5vNZmHhDPX4Oo09kOXMWBmnqhRFyeVynU7H2CkwVsYpZ3JyUiQS0QevkFECzhIeK2M7hTFWJuD06elpxqyea8fK8vLySJIsKiqyWq30/VartbCwkCRJPD1Jv/6duUr5bBcA/WQ4/cXpWT5Lx8fHg4ODL168KJPJ+vv7hRsFgAUy/xhjs9nEYjEepMZFPH09PDzc19enVCrR9HV/f//WrVs7OjqsVqvJZMrNzU1NTcWS0aCzRqOJjY3FOxnFOcWYsrKyuLg4ehPp6elqtdpoNPb19dGnWOVyeX19/fj4+MDAgFqt5jMwLy8vMTER/aM8ceJERUUFPl0ulyP9h4eHfX19lUolbpRPOEM9vk7jvKHk5uZu27ZNYM6fT9WqqiqVSoVmhg8ePIhmhhlm0kf/+eSoVKrc3FyLxYLmtJFRDGdNTk6KxWK9Xo/m3vl05nSK8zGGoTDbHL52nSQzMxOHATZGozEzM5Ohp/NXKd8FieH8yXBeEpye5SM/Pz8jI4OiqMrKyk2bNjnsBABYCPOPMRRFlZeXe3l5NTY20ounT58mSbK6uloul/v7+2dlZaEJz6mpqfLy8qioKIlEIpfLMzMz8XwjbuXw4cMlJSVYPqM4pxij0+kIgsC6URRlsVhSU1NJklQoFNXV1biyRqNJSEiQSqXBwcFFRUV8Btrt9sLCwvDwcC8vr5SUFPzveNeuXenp6fiUhIQEus58whnqIdPYncZ5Q7HZbPv27QsMDAwPDy8vL8fvg+HKfKpOT08fPXo0MDBQKpWq1Wr83xybyWiOTw56w5AkyZiYmNraWmQUw1kURRUXF+Pe49OZ0ynOxxh2yGF4ja9dlzOPGMN3QWI4fzKclwSfZ9l0d3eTJImemO12u0KhaGpqWpjpACCEgxgzDwTGXhwSFRV1/fp1vuKcsNlsUqmU8foNRq/Xy+Xy+Ul2CQz1FtJpGJcImTcLcRZiyZ2yhLzItgPPN4s65++QP//8U6A4J65du5aUlMSXeEqn00VGRs5b+MIRVu9/kYU4C7HkTllCXmTbgeeb5ZhLZuFMTEzU1dVlZGTQd3711Vfnz5+/f//+jRs3SkpK8vLy3KrDnTt3Dhw4wNiJkt5zqrdAnj17ptVqw8PDXShzEVhkpxAEERERcevWrY8++uiff/5xd1vCLL7tALAEuPzJaGlHbBASiSQtLY0xG6zRaOLj4yUSybp1686cOeNuHZRKZXV1NX1Pb2/vyy+/zKnewjstOztbJpNdunRpIUIWn0V2CnZBVlYWnq5fKhbZdgBYElwfY15YUMZftG21WkUiESPIVVZWHjx4EG3X1tZGRkZKJBKlUonee8bQ11SKRCKFQlFRUYEmqxnLLRHo9mQ0GkUiEeOFIsa75vSzwsPDi4uLcTICdpBjTFbX1tYqFAovLy+VStXe3s6pLVusQ0sFGnVoEed/JvrLuM3NzVFRUfR5fuyCnp4enNABAAD3ATHGZQi8DYVQqVTXrl2j/nu/bm9vHx0dvXDhgkwmo99JcYIZu93++PFjlMQFvTdMP4Shh5/IyEic3YTiWs+Exfb19W3YsKG0tJRPYfq5KE6gl2hbWloCAwM7OzudEeuMpXyNOrQINarX6/39/dH2p59+mpWVhSvHxcXRXyyku2A5PG0DwIsAxBiXIRxjzGazv78/+oMfGhqKMmYizpw5Q1/Hwz63s7MzJiaG8xD9LC8vr/j4eLwqkBJcM0tRlFarjY6O5jtKP5ehcENDA31lj4DYuVrKUFjYIvYes9lMkiRa0XLlypXIyEj6QwzdBRBjAGBxcDznz86OzpduHcFOCM/ORu58ynrOmmzmlBvfoVECKdn5GhJOkk/Qkt5PTEyYzWaUSwaxcePG/v5+ARdIpdLp6WmHnhKJRE1NTY2NjT///LPDygRBSCSSqakph9XYCufk5NTV1TkUOw9LGczVopCQkOzs7BMnThAEUV1dXVxcTM+wwvfdAYcJ/AEAmDeOY0xBQYHZbO7p6bl69Wpra2t9fT1BEDabrbe3V6vVdnV1mUymkpISXL+iouLx48e9vb1Xr17VaDQNDQ2ovl6v7+vra2xsRDcd9h7OhjhrBrFA1bq6urq7u7u7u3t6etCNhvN0AaN0Ol1nZ6dOpzObzdHR0Vartbe39/r160ajEdvI2ZCfnx/OKp+ZmcnuRpzLC62Mod/pfH19Jycn+fr//v37paWlarXaoacIgnjttdfKy8tzcnLoUZ+Thw8flpWV5ebmOpTJVtjDw2Pt2rUOxc7VUk6ctwhRXFx84cKFH3/80Wg0MnLB8aVTy87O/s9//oM+HgMAgIsRfszhzPhkFEy3zk4Iz85Gzt7Dl1qKXZPiysJkdDo3vrBRDlOy8zVECY6V8SW9RxgMBsZScIIg0Nc+ZDKZVCrNy8tDrw/QDyHwSwRY7PT0dGJiIpqWYE9vYLEikWjr1q30RvmGreiHDh8+jCTQP/HAJ9YZS4XHyoQtYp+CyMvLk0ql9fX19J2Mb0bQm+ZM4A8AgEtwsAaTLzs6X7p1voTwjGzk7D0CKevZ57Izlg8NDTmZG1/YKGc+HMDXkAD0pPdisZgx8MVOm+/l5YWSzYhEIrlcTh/wwYdwkdHWihUrmpqalEplWlqaUqnkFEsQhMFgKCwsPHv27KFDh4SVpytcWlpaWFjIyE7NJ9YZS51BwCJO8vPzGxsbc3Jy6Dv5vjtA8CTwBwDAJbh4nT9nQnhnBv3nBDtjeXd3t2ubcC30URo0nvbs2TM8iDQ5Oenr60uvLxKJ+L5xInAI8+qrr1ZVVe3bt+/KlSt854aFhdXW1ubk5KAYgz62NjMzg+OZzWZDAYyusJ+fn5+f3+joKD228Yl1aKlAo05axImvr69YLEZf5cEIf3eAncAfAACX4GA+Ri6XSySSu3fvoqJer8fPKJyEhIR4eXmNjY2F/Rf8YRgXNqRjQRCE3W6/d+8eqjAwMPDyyy+7yigGzjeEmJmZaWtrwzc4Pz+/0NDQzs5OXAG9Nua8As5w6NChmJiYgwcPCtShP2cEBQXJZLLr16/joxqNBn32CimMPyJHEERHR4fAt86wWIeWCjQ6P4v4YLiAwYEDB5RKZXBw8MDAwLFjx+YhHwAAXhyOprGzowtnlmUnhOccdncyZb2T75jOKTf+PIyiT05wNkT9/6zyJpNJKpWi/Yyk9xRt1YjVakWf8RBeNcI4xLc+hj35QZIk5/oYu93e39+/cePG/Px8XL+uri4qKkqj0aBFMDKZDC+CwetjRkdHm5ubZTKZVqt1RqywpcKNOrSI01OcJ7JdMDg4iM8STuAPAMBCcBxj2NnRhW/H7ITwTsYYzjTszscY53Pjz8MoxgQ4uyEEzipvt9ulUimKN+yk99QcV7/TD7H/JeB1/uyzGhoa+Nb5y+Xyffv24Rc3EDU1NQqFQiKRxMbGMtLSoGghkUji4+PpS14cihWwVLhRhxbhag5jDNsFLS0tcXFxbGUAAHAtL1E8OTn+txgaGoqNjf3333+XT0OHDh3q6+v75Zdf1q9f39TU9Oabb7pbN4APhguePn0aHR1dWlq6d+/epVUMAJ57lldu/+eJU6dOoYmihSe9BxYIwwWenp7Nzc1vv/32UukDAC8Oz2du/+WAh4fHG2+8sdRaANxAgAGAxQFiDAAAAOAunpP5GAAAAGAZAs8xAAAAgLuAGAMAAAC4C4gxAAAAgLuAGAMAAAC4C4gxAAAAgLuAGAMAAAC4C4gxAAAAgLuAGAMAAAC4C4gxAAAAgLuAGAMAAAC4C4gxAAAAgLuAGAMAAAC4C4gxAAAAgLuAGAMAAAC4C4gxAAAAgLv4PzmsYGkLly+xAAAAAElFTkSuQmCC)

Research’s Comment:

![](data:image/png;base64, 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)

Screenshot: mygatewayproject.eu  vulnerability

Mirror: Click here to view the mirror

Coordinated Disclosure Timeline

Vulnerability Reported: 23 December, 2019 05:32 GMT
Vulnerability Verified: 23 December, 2019 05:43 GMT
Website Operator Notified: 23 December, 2019 05:43 GMT
a. Using the ISO 29147 guidelines
b. Using publicly available security contacts
c. Using Open Bug Bounty notification framework
d. Using security contacts provided by the researcher
Public Report Published
[without any technical details]: 23 December, 2019 05:43 GMT