biphim.tv Cross Site Scripting vulnerability

2020-03-1812:03:00

MrRain_1996

www.openbugbounty.org

JSON

Open Bug Bounty ID: OBB-1120321

Security Researcher MrRain_1996 Helped patch 984 vulnerabilities
Received 4 Coordinated Disclosure badges
Received 9 recommendations , a holder of 4 badges for responsible and coordinated disclosure, found a security vulnerability affectingbiphim.tv website and its users.

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:

&nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence;
&nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence.

Affected Website:	biphim.tv
Open Bug Bounty Program:	Create your bounty program now. It’s open and free.
Vulnerable Application:	Custom Code
Vulnerability Type:	XSS (Cross Site Scripting) / CWE-79
CVSSv3 Score:	6.1 [CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N]
Disclosure Standard:	Coordinated Disclosure based on ISO 29147 guidelines
Discovered and Reported by:	**MrRain_1996 Helped patch 984 vulnerabilities
Received 4 Coordinated Disclosure badges
Received 9 recommendations **
Remediation Guide:	OWASP XSS Prevention Cheat Sheet
Export Vulnerability Data:	Bugzilla Vulnerability Data
JIRA Vulnerability Data [ Configuration ]
Mantis Vulnerability Data
Splunk Vulnerability Data
XML Vulnerability Data [ XSD ]

Vulnerable URL:

![](data:image/png;base64, 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)

HTTP POST data:

![](data:image/png;base64, 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)

Research’s Comment:

![](data:image/png;base64, iVBORw0KGgoAAAANSUhEUgAAAiEAAAA3CAIAAABVZQ1/AAAACXBIWXMAAA7EAAAOxAGVKw4bAAAScElEQVR4nO2dfUxT1xvHr12FUksRqVVelIIbGkMY2wjBDZEZo6ZrSIfIjGNiNqLGdIwRZxA3xtTh21xmxwgzzjizMLIoIYQ4tnRuYYQYZIiMYUdIFVZrx7CjWDtkwP39cfK7ubkvp/cWbovz+fzVnnvuOc95znN6es9pv2ceSZIEAAAAAEiALNgGAAAAAP9ZYI4BAAAApALmGAAAAEAqYI4BAAAApALmGAAAAEAqYI4BAAAApALmGAAAAEAqYI4BAAAApELQHPPpp5+uWLEiNDT0mWee+fbbb6W2KQAMDg6Gh4f7kdntdh89enQWKxVlyQx5++23w8LCvvzyS4nKHxwcjIyMpKd89913ERER9+7do1JeeOGFgwcPEgRx//79t956Kz4+PiwsbOXKlcePH5+amkJ5MJf8syoAHuarhUpnZJitoJIaum2z7slABj8QNEhfmM1mnU5nsViGh4fr6uoWLVrU2trq8645zu3bt1UqlfD84+Pj/t3os9KZFCiKkZERmUzW3d09OTkpURW3b99euHAhI1Gv1xcXF6PXDQ0NMTExHo+HJMm8vDyj0Wi1WoeHhy0WS3Z2dkdHB8qGueSfVQHwMKYWFDzsDLMSVFJDt23W7ZzLDQdmC99zTExMzJUrV6i3n3zyicFgkNKkQOB3cD+6c0wAKuKcY6xWq1KptNlsk5OTSUlJ58+fJ0nS6/XK5fLR0VF2IZhLflsV3DnGZ4a5/FELcwwwQ3yslbndbofDkZmZSaVkZWX19fUR/3/OPXXqVEJCQmRk5Kuvvup2uxm3f/bZZ5s2baLeHjx4sLCwkCCIBw8e7N69e/HixcuWLfvggw+mpqbYKwnUqgu6dPTo0cWLF0dHR3/xxRdUtpdffvnkyZPo9Y0bN0JDQykbdu/e/c477xAE8fDhwzfeeCM8PDw+Pv7999+nr7ocP358yZIlkZGRhYWF//zzD0q8du3a2rVrw8PDY2Njt2zZcvPmTco2t9ut0+k8Hs+8efPQihOmcFGcPn06ISEhKirqtddeo5pw7dq1NWvWhIWFLV68eOvWrXfu3CEI4pVXXvnwww+pG9esWSPEknv37tEtZ/uf4FrMQV2A7+g7d+5s2rQpPDx85cqVdXV17KatXLly165dZWVlZ86cUavVKACmp6cJgpDL5ez8mEsUnE7AhBA9ka8tnA7kjD3OfkGwI8rnGhojqPiGDCdTU1MHDhxYsmTJggULtm7ditYkMZ178uRJhnn46tgBT/DEqpCBwOc3zmHI2Qr/gh8IMvgpyG63KxQKesrAwIBGoyFJ8vbt2wRB7Nixw+Fw9Pf3Z2Zm7t27l/P2sbEx9DY5ObmxsZEkyddff91gMAwNDfX29j777LNms5nxjYb+jZiqyOl0trS0WK1WKtvZs2c3btyIXh85ckQul9fX16O3iYmJ6PGrvLx827ZtNputr68vOzu7urqaKjMvL29oaGhgYCA5ObmyshLdqNVqz54963K5bDbbxx9/bLPZ6LZZrVaVSjU+Po5WnDgL54PvOYYgiJ07dzocjoGBgfXr1+/Zswddqq2tPXfu3OjoqNPpLCkpMRqNJElevHgxLS0NZXA4HAqFAn3l92kJ3XK2/9nmUV2A72ij0Uh3I/s5hiRJl8ul0WgWLlzY3t5OJebk5BgMhra2NrR0RgdzCcHpBIz99G/ifG3BxAkj9jj7hS+iqNrZ5nEGFd+Q4aSqqiotLa2np8dutxcXF6NFbL7O5TTPZ3V02zCxKmQgsP2GGYacrfA7+IEg4mOOYX8s2mw2+kcPFZ1tbW2JiYnsEjIyMi5evEgVhYJVpVLZbDaUoampKSMjw+cc43K52IU7HA6lUonWtdPT00tLS7dv345uUavVExMTJElqNBrqo6q7uzs9PZ0qc2hoCKU3NDSg2HW5XHK5nFooZzuBYSdn4cKdyXZje3s7pxsHBgaWLl1KkqTX61Wr1cjympqanJwcgZZQtXP6n20eY47h7OjJyUmFQkF3I+ccQ5Lktm3bli9fTk8ZGxsrKytLSkqSy+VPPvlkZWUltVGEuYTgdILwOYazLZg44Yw9BNUvfBElZI5hXGIPGb7atVptV1cXPQXTuZzm+awO4z16rIoaCJTf+Kzia4XfwQ8EEdyKBEEQcrl8cnKSnjI9PU2tY6hUKmodIC4uzuVysUswGo3Nzc1btmxpbm7W6/WhoaF3796dmJhISEhAGVatWoVCDYNKpWKvexAEER0dnZSU1N7evnr1aofDUVFRkZSUNDU1ZbFYNmzYMH/+/L///ntkZESn07GNVygUy5Yto2wYGhoiCCIyMjIvLy8jI2P9+vUxMTFpaWnr1q3jswpTuCjoboyJiaHceP369f379/f19U1MTExPT6NFpLCwML1e39jY+OabbzY0NOzcuVOsJcPDw374n7Ojh4eHCYKgu5Hz9l9//bWlpSUuLu7zzz/fvXs3SkRrUEePHn348GFXV1dpaenk5OThw4fxlxCcThAIZ1swDmTHHme/EDwR5QfsIcOZze12u1yulJQUeiKmc/nME1gdgjNWBYYfp984reJrxcyDHwg8PjoDfa/5999/58+fj1LGxsbUarXwCnJzc9F2TnNzs6jPAoHo9XqLxWKz2QwGQ0RERGpqamtrq8Vi0ev1BEGMj4/LZLLOzk4q7GQyH1tQX3/99S+//NLb2+twOEpLS59//vl9+/Zx5vSjcFEYjcaioqLa2lqFQmG32zdv3ozS8/Pzq6urCwoKOjo6GhoaAmDJDCkuLi4tLc3KysrLy8vPz2d8ZIeGhq5Zs8ZsNhcUFNAnEvwlthNmgigH8vXLbCFqyDzxxBOBrI4Tgd6bFb89csEP+OiMiIiImJiYtrY2KqWtrW316tXCK3jqqae0Wu0PP/xw9epV9Lmv1WpDQkJu3bqFMlitVp1Ot2jRIq/Xe//+fZRot9sFlm8wGCwWS1NTU05ODkEQRqOxsbHxp59+QnVFR0crlUqXyxX7f6Kjo9GN4+Pjf/zxB3rd39+/fPlyqsznnnuusLDwwIED586da2xs5KsaU/jM+euvvxwOx3vvvbdixYrY2FiFQkFd0uv13d3dFy5c2LBhA/pSKcoSTv8TBOFHF2i1WoIg6G5k57l06ZLNZtu3b9+6desyMzMrKipQ+oMHD+jZ0CKqz0sYJ/gdQoQYB2L6BRNRomAPGU4iIiIWLVp048YNeiJf52LME1gdBiHe4/Mbp1WYVsww+IEg4HM1jfp/zMjISH19PfX/GMwOCoOKioqUlBT6L56LiopycnIYG3rp6elFRUVOpxNtxtL3Y/A/cNRqtVqtFq0j2+12tVqdmppKXd2zZ09GRgZ6Ljlx4sShQ4dI2hao3W7v7e1NTU1Fm419fX2bN2++cuXKyMjI0NBQUVGRwWCgG+DxeORyeX9/P6ZwPoT8dpnuRq1WW1NTMzo62t/fbzQa6e7dvn27Wq3+5ptv8M3kq4jT/yRPF+A7Gu35U25kxIDX69XpdF999RV629/fr1Qqe3p6rFarVqs9c+aMw+EYHR1tbW1NTk6uqqoiSRJziQHbCZz2j42NyeVyq9WKdq352sIXJ+wu4+wXvoiiSqCbwSiZEVQk15DhpKqqKj09He35m0wmNDA5O5fPPJ/V0W0T6z2ffsNYxReipF/BDwQR33MMSZJmszkxMTEkJCQ1NfXy5csoUfgc093dTRAE+mMEwuPx7Nq1S6PRxMXFUTu66JcqKpVq9erVZrNZ+Byzffv2vLw86m1aWlp5eTn1dnx8vKSkJC4uTqlU6vV6tJGIyjxx4oRWq124cOGOHTu8Xi9JkhMTE5WVlUlJSSEhIVqttqCgwOl0MgyorKxUKpWoOZjC2XaKnWNaW1vT0tIUCsXSpUtLS0vp7m1sbFSpVMhmTDP5KuL0P8nTBfiOttvtGzduVKlUSUlJH330ESMGDh06xNiALSkpyc7OJkny8uXL2dnZarVaqVSmpKScOXOGyoO5RIftBL4QKisrQ12GaYvwruTsF76IopdAmcEumR5UJGvI8EXU5OTk/v37NRqNQqEwGo0jIyMkT+eiEo4dO8Ywj7M6BpRtYr3n0298TuNrBcKP4AeCyDySJKV+VHrw4IFGo3E4HJz79v89BgcHk5OTqUUbABALY8jMPKLwJTxuIxQIJIHYHPv+++8zMzMfq/Cllo8BwA/YQ0bSiHoMRygQMCSfY9xud3V1dX5+vtQVzR1UKhXmlwIAgIc9ZCSNqMdwhAKBRPI5hlpplbqiuUNUVNSKFSuCbQXwqMIeMpJG1GM4QoFA4mOOoastCRHiZud5+PDhpUuX8H/sEg6nCFXAECtFPjg4OI/F6dOn/ZY0l1qcf3bhlLWfRTl3Pkl8SeXoA8DsDhlEfHw832aMFNUBAIWI55j4+PiRkRHpTJn7+OEB9CdWOiaTyT9P3rt3z2w2X716taCgQOy9QUHqgBkdHa2qqhKeDgBA4BEnugBfdvzwAOctfpTj8XiUSuXTTz8t9sYgAgEDAI85Ip5jGEsfeFV/giB+++23qKion3/+mZHOKfGNKdOnejzBf1gAW8ycwKq44xsl1gMCPcmQjuc0jyHOz9nkW7duLViw4Pr16yh/ZGTkjz/+SK+XU8hdlM4/HZ8HK4hdp7p79+5LL70UHh6ekJBw6tQpqkZOh3DKzvOl+yFHj4kfUeL5+BMTOMsHgP8Sfu75ezyenp6e9vb2jo6OoaGh8vJyRga3252bm3vs2LG1a9cyLnV1de3atcvpdPb29sbFxZlMJnyZJpNJrVb39fVdvnyZb44pLi52OBxdXV0tLS1NTU01NTWowI6Ojs7Ozs7Ozq6urhMnTqDMhw4d8nq9PT09LS0tra2ttbW1AhslygMC8Xg8Vqu1t7f3/PnzSDaK07yoqChKZR2tlbGbnJCQUF5eXlJSQhBERUWFXq9/8cUX6XUZjcbW1lZqXb6pqSk3N5fTdUJAKj7odXNz8/T0dEtLC3pL6cWJwmQyhYSEDAwMWCyWCxcuUOmcDomIiGA4BMFO93g83d3dqKccDkdZWRmmWDp88cPnMb78fIjNDwCPJPi/aHIqkGME0qk8er2efZwMG4Y0OrtMIerxfIcFEDxi5hgVd/xRBUI8wMhPEISGhslkYpfDkI7nEyqn9wWf+PnExMSqVasqKys1Go3T6WSbxBBy93q9onT+6fg8WIFT1h7zl3WFQkFZQu9oIQ5huH3mcvRiZed9avszPImJTwD4L+GnCDZe1f/gwYMtLS1nz57lvJdPGp2zTCHq8XxK4Jyy4XgVd59HFQj0AIVSqURCHdRbdjn0ZSiBQuV8TZ4/f351dfWGDRvMZvOSJUvYNzKE3EdHR8Xq/FP4PFhBYDlUi6anp+mWoBczV273W45elOw8X34Ms3UWAADMZWb/oAWv19vQ0FBfX28ymXJzcyMiIhgZpJZGxxNgJXCZTBYbGys8/8zNczqdMpnM6XRyXp3doxbwByvMChL1FwjCA0BgmP1xJZPJGhoatm7dmp6e/u677zKuYqTRORGiHs+nBM4pGz7HlcAFmsfXZLfbvW/fvrq6utra2ps3b7JvZAi5z1DnH3+wgii0Wq1MJhscHKQsEeUQsQgpVqzsPGd+jCdn6ywAAJjT4JfSOHXR8eci008pVygUPT09jDL5pNH5ysSrxyPYSuAY2XAhKu6cOxBCPMCZX2A5GPPYmTnFz/fu3Zufn0+S5JEjR5C8MRuGkLsonX82mIMVOGXtGRL3dPLy8tAZ7729vSkpKT5149mS+Ox0v+XoxcrOY/LznZjAlx9zuDIAPHL41vZn66ILnGNIkiwuLs7KymIUiJFG5ywTrx6PYCuBY8TMhai4B3GO4RMqZ2RmN7mzs1OlUqFt5PHxcZ1Od+HCBXbtDCF3UTr/bDAHK/DJ2tNf03E6nQaDQaVS6XS6Y8eOCdGNZ0jis9P9lqPHxI9Y8XzMiQns/D5PsgCAR4tAaPsHBRDY5+OREHL//fffs7Ky/vzzz2AZIDZ+pM4PAI8osM/52PFICLl3d3cnJiYG2woAAGbK7P+uDJjLICH3bdu2BdsQDg4fPhwTE5OTk2Oz2crLyysqKoJtEQAAMwWeYx4v5rKQe3Z2dk1NTVxcXEFBQXFxcWFhYbAtAgBgpvxn92MAAACAoAPPMQAAAIBUwBwDAAAASAXMMQAAAIBUwBwDAAAASAXMMQAAAIBUwBwDAAAASAXMMQAAAIBUwBwDAAAASAXMMQAAAIBUwBwDAAAASAXMMQAAAIBUwBwDAAAASAXMMQAAAIBUwBwDAAAASAXMMQAAAIBU/A/nBwZE9o4FQAAAAABJRU5ErkJggg==)

Screenshot: biphim.tv vulnerability

Mirror: Click here to view the mirror

Coordinated Disclosure Timeline

Vulnerability Reported:	18 March, 2020 12:03 GMT
Vulnerability Verified:	18 March, 2020 12:12 GMT
Website Operator Notified:	18 March, 2020 12:12 GMT
a. Using the ISO 29147 guidelines
—	—
b. Using publicly available security contacts
c. Using Open Bug Bounty notification framework
d. Using security contacts provided by the researcher
Public Report Published
[without any technical details]:	18 March, 2020 12:12 GMT
Vulnerability Fixed:	13 July, 2020 11:53 GMT
—	—
Public Disclosure: A security researcher can delete the report before public disclosure, afterwards the report cannot be deleted or modified anymore. The researcher can also postpone public disclosure date as long as reasonably required to remediate the vulnerability.	17 April, 2020 12:03 GMT
—	—

JSON