Lucene search

K
openbugbountyRaviakp1004OBB:1148256
HistoryApr 21, 2020 - 9:33 a.m.

mariliashopping.com.br Cross Site Scripting vulnerability

2020-04-2109:33:00
raviakp1004
www.openbugbounty.org
5

Open Bug Bounty ID: OBB-1148256

Security Researcher raviakp1004 Helped patch 652 vulnerabilities
Received 4 Coordinated Disclosure badges
Received 5 recommendations , a holder of 4 badges for responsible and coordinated disclosure, found a security vulnerability affectingmariliashopping.com.br
website and its users.

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:

&nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence;
&nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence.

Affected Website: mariliashopping.com.br
Open Bug Bounty Program: Create your bounty program now. It’s open and free.
Vulnerable Application: Custom Code
Vulnerability Type: XSS (Cross Site Scripting) / CWE-79
CVSSv3 Score: 6.1 [CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N]
Disclosure Standard: Coordinated Disclosure based on ISO 29147 guidelines
Discovered and Reported by: **raviakp1004 Helped patch 652 vulnerabilities
Received 4 Coordinated Disclosure badges
Received 5 recommendations **
Remediation Guide: OWASP XSS Prevention Cheat Sheet
Export Vulnerability Data: Bugzilla Vulnerability Data
JIRA Vulnerability Data [ Configuration ]
Mantis Vulnerability Data
Splunk Vulnerability Data
XML Vulnerability Data [ XSD ]

Vulnerable URL:

![](data:image/png;base64, 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)

HTTP POST data:

![](data:image/png;base64, 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)

Research’s Comment:

![](data:image/png;base64, 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)

Screenshot: mariliashopping.com.br  vulnerability

Mirror: Click here to view the mirror

Coordinated Disclosure Timeline

Vulnerability Reported: 21 April, 2020 09:33 GMT
Vulnerability Verified: 21 April, 2020 09:48 GMT
Website Operator Notified: 21 April, 2020 09:48 GMT
a. Using the ISO 29147 guidelines
b. Using publicly available security contacts
c. Using Open Bug Bounty notification framework
d. Using security contacts provided by the researcher
Public Report Published
[without any technical details]: 21 April, 2020 09:48 GMT
Public Disclosure: A security researcher can delete the report before public disclosure, afterwards the report cannot be deleted or modified anymore. The researcher can also postpone public disclosure date as long as reasonably required to remediate the vulnerability. 20 July, 2020 09:33 GMT