Lucene search

K
openbugbountyHowardpottsOBB:1051805
HistoryDec 26, 2019 - 2:07 p.m.

trueplookpanya.com Cross Site Scripting vulnerability

2019-12-2614:07:00
howardpotts
www.openbugbounty.org
9

Open Bug Bounty ID: OBB-1051805

Security Researcher howardpotts Helped patch 258 vulnerabilities
Received 3 Coordinated Disclosure badges
Received 1 recommendations , a holder of 3 badges for responsible and coordinated disclosure, found a security vulnerability affectingtrueplookpanya.com
website and its users.

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:

&nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence;
&nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence.

Affected Website: trueplookpanya.com
Open Bug Bounty Program: Create your bounty program now. It’s open and free.
Vulnerable Application: Custom Code
Vulnerability Type: XSS (Cross Site Scripting) / CWE-79
CVSSv3 Score: 6.1 [CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N]
Disclosure Standard: Coordinated Disclosure based on ISO 29147 guidelines
Discovered and Reported by: **howardpotts Helped patch 258 vulnerabilities
Received 3 Coordinated Disclosure badges
Received 1 recommendations **
Remediation Guide: OWASP XSS Prevention Cheat Sheet
Export Vulnerability Data: Bugzilla Vulnerability Data
JIRA Vulnerability Data [ Configuration ]
Mantis Vulnerability Data
Splunk Vulnerability Data
XML Vulnerability Data [ XSD ]

Vulnerable URL:

![](data:image/png;base64, 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)

HTTP POST data:

![](data:image/png;base64, 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)

Research’s Comment:

![](data:image/png;base64, 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)

Screenshot: trueplookpanya.com  vulnerability

Mirror: Click here to view the mirror

Coordinated Disclosure Timeline

Vulnerability Reported: 26 December, 2019 14:07 GMT
Vulnerability Verified: 26 December, 2019 14:14 GMT
Website Operator Notified: 26 December, 2019 14:14 GMT
a. Using the ISO 29147 guidelines
b. Using publicly available security contacts
c. Using Open Bug Bounty notification framework
d. Using security contacts provided by the researcher
Public Report Published
[without any technical details]: 26 December, 2019 14:14 GMT
Public Disclosure: A security researcher can delete the report before public disclosure, afterwards the report cannot be deleted or modified anymore. The researcher can also postpone public disclosure date as long as reasonably required to remediate the vulnerability. 1 April, 2020 14:07 GMT