Lucene search

K
openbugbountyPapix2020OBB:1150335
HistoryApr 25, 2020 - 4:19 p.m.

laptop-adapters.org Cross Site Scripting vulnerability OBB-1150335

2020-04-2516:19:00
Papix2020
www.openbugbounty.org
6

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:

&nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence;
&nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence.

Affected Website: laptop-adapters.org
Open Bug Bounty Program: Create your bounty program now. It’s open and free.
Vulnerable Application: Custom Code
Vulnerability Type: XSS (Cross Site Scripting) / CWE-79
CVSSv3 Score: 6.1 [CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N]
Disclosure Standard: Coordinated Disclosure based on ISO 29147 guidelines
Discovered and Reported by: Papix2020
Remediation Guide: OWASP XSS Prevention Cheat Sheet
Export Vulnerability Data: Bugzilla Vulnerability Data
JIRA Vulnerability Data [ Configuration ]
Mantis Vulnerability Data
Splunk Vulnerability Data
XML Vulnerability Data [ XSD ]

Vulnerable URL:

![](data:image/png;base64, iVBORw0KGgoAAAANSUhEUgAAAiEAAAA3CAIAAABVZQ1/AAAACXBIWXMAAA7EAAAOxAGVKw4bAAAUa0lEQVR4nO2dfUxT1/vA72rFWgpWKBURGTBXzcIYIQzRMUMIUcII6RgiwQ7xJYiGMELUMWYYYw6JInGbI4ao2RbijHGEGEOcYcR0hE2mBFnHuqZ2iLUQRCwMa2XF8/vj/L4nd/eN22Ll7fn81XPueX2e596n95x7n/sSQogCAAAAAC8gmekBAAAAAPMW8DEAAACAtwAfAwAAAHgL8DEAAACAtwAfAwAAAHgL8DEAAACAt5gVPiYiIuL27dt8SWBBAdqf38ysfsG6Xjwz72N+//33Z8+evfHGG5xJYEEB2p/fzKx+wbpmhCl8zN27d/38/DgPjY6OHj16lC8pnsuXL2dkZPAlvY3ABMXg8aynw927d5cvX+5BxRkZrVu8YO1T0zMAz+o+evRo586dQUFBq1at+vDDD//9999pGqH38MzSyHTY1V+8fqff+3PUjsdn7pzG8/sYu91eXV3NlxTPzPqYaeLxrGeE2T/auaV9z8jPz5+YmOju7m5ra+vo6KioqJjpEb045qKPAaaJdGa7HxgYMJlMSUlJnElgQbEQtP/kyZOuri6j0ejr60tRVF1dXW5ubmFh4UyP63kilUo1Gg39B2Zm9bsQrGt2Iuo+5osvvoiIiAgMDHz//fdHR0cpihodHQ0PDx8fH3/ppZe+/fZberKurs7Pz+/48eMrVqxYvnz5jh07njx5wtfy5cuXN2/evHjxYkby3XffPX78OM68ffv2kiVLcL8URe3du/fVV18VOHrw4EHh6gcPHhSY7G+//bZhw4alS5cGBQVt3br1/v37+GaZPSOGECiKevz48d69e4OCglavXv3pp59OTk5S/7vXFikQdu84//79+1u2bPHz81u7du358+efy2ifPn26e/duPz+/l19++ZNPPqGP9ujRo0FBQStXrjx79izu5e233/bz81u1atV77733559/MoYtMHFGUwMDA++8846fn19ERMSJEyfoSwd0Y+DskXPAfELj7H1ycvKjjz5asWKFr6/v1q1bHz58iFtgWzgdYQ1y1uWrsnTp0nv37mEHQ1GU2WwOCQmh9/XHH38EBgb+/PPPOMme8tdff71lyxZS/uOPP96xY4cYg2friFNEfJbGx48//sjIWbVq1a1bt/CPGzducOqXXUugZbYxbNu27fPPPyclN2zYgE1apHUJmOuJEyciIiKWL1++fft2tiXw1aXcP3MXEEiQvr4+iqLy8/NtNpvZbE5OTi4sLMSHjEajQqFwOp0ul4uetFgsFEVlZWX19/ebzeaoqKjKykq+9tPS0hobG9nJM2fObN68GWceOXJEKpVeuHABJyMjIw8cOCBwtK2tTbh6W1sbfYIKhYI+pNOnT587d85utw8ODpaUlGi1WiwEzhkxhLBr16709PT+/n6DwRAbG/vll18SGYoUCLt3nK/VauktKJXK6Y+2vLw8JyfHYrH09vYmJSWdOnWKjDYvL29wcPDq1atGoxEhpFarz5w5MzIyYrFY6urqLBYLY9gCE2c0lZmZqdVqBwcHzWZzdHQ0mQjDGDh75Bwwn9A4e6+uro6Li+vp6bFarcXFxXq9XsDC6UbCKVKBumKUbjQaQ0JCOjs7iRHa7XaNRtPQ0EDKsKdstVplMtnY2BguEBUV1dzcLMbg2TriFBGfpalY4Pzg4ODk5OSbN29y2jMdun6Fa3V2diYnJwcHB/MZw6VLl+Li4vBRm80mk8nsdjsSbV3C5mqz2UwmU2Ji4v79+xHrEsFZF7l/5i4cRPkYYtAdHR2RkZHkEF30JImr9Pf34/ympiZiDf39/eHh4aTK+Pi4QqEYGRlhJ202m1wudzqdCKH4+PjS0tLc3FzcuL+/f39/v8DRiYkJ4eoTExPsYXNiNpuDg4MFZkSv7nK5FAoFuf5evnw5ISFBWCDC4N5xyzKZjN4Cp6W6NVqEkEqlGh8fx7+7u7vj4+PJaIlSEEIjIyNSqRQLkxPhidObwhMhJekToWufr0fOAfMJjd07QkitVnd1ddFzBCycUYYtUuGzQ1jpVqs1MjISewKil7S0NHxdE55yQkLCpUuXSEWn0zmlwXPqiE9BnJZmZYHzx8fHq6urAwICsrOzTSYTWyOkGONk56xlMpmys7MDAgKqq6vxxDmNweFw4OsAQqi+vj4jIwOJti5hcyXabG9vx9oUc44zcPfMnd9M7WMYjoTISMDHyGQykt/b26tWq/Fvl8tls9nIoaampuTkZL5kTExMW1vb4OBgaGio3W5Xq9Uul+vMmTOZmZlTHhVTgHMWCKGurq6UlJSQkBCVShUQEKBUKgVmRK9us9l8fHxIMZPJRC52fNXZ/wrZvaP//VOjt0C04PFoR0ZGKIoivQcEBOBinE43JycnJiamtLS0trb2+vXrjKMCE2c0xShJnwhD++we+QbMJzR273a7XSqV4ns4goCF0zM5RSp8dvBpAZOQkED+AuN2ysvLJRLJuXPnSBm+KdfU1OTn5yOETp06lZ2djQsLGzynjjgVxGdpwoyMjGi1WqlUyleAoV++WlKpVKvV4psSAqf55eTkYAGmpKTgGxSR1iXSXIk2xZzjyP0zd+HwQvf8Fy1atHLlSpIUfqIsLS2ttbXVYrGkp6cvW7YsJiZGr9e3trampaVNeVRMAT60Wu2ePXtOnz4tk8msVmtqaurzFMF/6e7unmbvHo/W6XRKJJKbN29Kpf9vAxIJ7+bc999/f+vWLYPBYLPZSktLN27c+NVXX4nsSCQM7bN7xJdgzgG7JYRFixY935F7wMDAQE9Pzy+//EJyHA5HU1PThQsXioqKMjMzly1bRvHrKDMzMzExkaKoK1eu5Ofn40MeG7xIgoKCGDkPHjzAP+7cuVNRUaHX66uqqviqs5/p4qxVVVVVW1u7f//+qqqqV155BWdyml92dvapU6d0Ol1nZ2dTU5Pw4F/AE2Uv8roxxxB2QZ7dx1C0VYLm5mbOpSGXy6VSqchdJyOJEOro6IiPj8/IyGhpaUEI1dfXFxcXBwcH4zsh4aNiCnDOYmhoiP6vqru7G98Z8M3Ig7UyPoHw9Y5Yd9zNzc04fzqjRQgpFArGwhG7DJvu7u7Q0FB6jsDEGU3hifT19eEkWTpga5+zR84B8wmNcyJqtbq7u1tgvnz3MZwiFT47BJTucrnok+3r65NKpb29vQih9PT0oqIicohzygihqKio1tZWpVJJX6kTMHi+tTJOBbEtDfGvlRUWFioUitLS0uHhYfY4SbMM/QrUGh4eLikpUSgU7I0xRDMGp9MZEBBw8uRJsjIh0rpEmivnfQxfXXfP3AWF5z5mfHxcKpWStVSSJLudVqvVYDDExMTQdzvJuqper4+KiiL5jCRGrVar1WpcxWq1+vv7x8TEiDw6ZQGcPzY2JpVKjUYjWUJRq9X19fV2u91kMmm1WnLV5pwRQwh79uzJyMjg2/PnFAh7yozecT7eOSQtkPzpjLawsDAhIQH/PTx27FhVVRVb4wih3t7e1NTUtra24eHh/v7+PXv2pKen01UpMHH2VT4rKws/mGAwGMiuLEP7fD1yDphPaJy9V1dXx8fH4z3/oqIivOcv4GPwHPlEOqWPEVA6XXr0doxGo0wm6+npEdARQqiioiI6OhqLhSBs8GwdcYqIz9L40Ol05LLOB/vsnrJWX1+fTqdD/MaAEMrNzfX397948SKpJca6OEWB+LXJuERw1kXun7kLB899DEKosrJSLpd/88039OSJEycUCkVNTY1arVYqlXl5eQ6Hg93agQMHysvLSVOMJCY3NzcrK4sk4+Li6GWEjwoXoI+krKyMPgu9Xh8XFyeTyYKDg0tLS/FVm29GDCGMj48XFBSoVKrQ0NDKykpslMLVGbB7x/lWq3Xz5s0KhUKj0dTW1pL86YzW6XSWlJSEhobK5fK0tDT874x93ZmYmKisrNRoND4+Pmq1WqfTDQ4OMooJTJwxwcHBwfT0dIVCER4eXlNTgyfC0D5nj3wD5hMaZ+8ul+vQoUMqlUomk2m12uHhYTF36nwinbIunxYY5xGjneLi4k2bNuHffFPGq6zEaDHCZwRbR5wi4rO06cB5douEzxgQQs3NzQqFgi5YMdaFxJkrXUf0SwRnXeT+mbtwmMLHeMCUiy0YjUbz66+/8iVnFSJn5KXqs7y76WA0GvEm9mzWPvJIpN7Wwvj4uEwmYzw1N2uZEf3OFeua98zYe/5//fWXQBJYCHR3d0dGRlKgffe5du1aYmLiXAl+NSP6BeuaJcx83OXnwu3bt/ft28fIhDjes42IiIh9+/atX7++t7f3xo0b5eXl8yyMyothdHQUP7U80wOZdXz22Wdnz5598OABWNfsYZ74mPz8/PDwcHoOxPGebWCN5Obmms3m119/XafTFRcX79ixY6bHNfcgezwzPZBZR1JSUn19fWhoKFjXLGKmF+s8BIcQxr+Hh4clEgnjTeAjR44UFRVdvXrV39+f/nwkftMCITQ2NlZcXBwWFiaTyTQaTU1NDd6+48sXAD9ERAgNDS0rK5uYmBgcHFQoFPiZVExjY6NGoxFokN6URCIJDw+vqqpilMcPSur1epEVyd6AgDSGhoZyc3MDAgJCQkJKSkqIMIeHh3U6nUqlCgkJwZNytzBDIwihrq4u8uYaAADzm7nqY+h7qpz7q/Hx8deuXUMIpaWlFRcX48ympqaQkBAcowI/5mg0GoeGhlpbW5OSkjo7OwXypxyM0+l0Op0Oh8NgMGzcuPHw4cMIoZKSkry8PFIyOjqa8SyQcFM4fAh5YhXz5ZdfKpVKxtsDAhXp8uGTRmpq6q5du0jcrQMHDpDyubm5VqvVaDQmJCTgSblVmK2ROfRUAgAA02R++hibzaZUKvH/aKPRKJfLLRaLy+XSaDT4Eu9wOKRSKSNkhUC++MFgOjo61q1bh0eiUCjwqwAtLS2RkZHCd0Xsptrb21977TV6TkJCQmNjY3BwsHDgNVKR8foFWxr4ISUSF6uzs3PNmjU4XyKREGm0t7drNBq3CpPB0DUCPgYAFg6e7MfwxS3nDBU+ZRhtX1/fbdu2PXz48ODBg0FBQYGBgTt37nz8+LFAR+ww9QzocbzXrl1bUFBQVlbW0NDg7++Pl2ifPXtGURQJ0UHgy3cXHx+fiYkJiqJWrlyZn59/7NgxiqJqamrKysrcjWUik8lcLhdJ3rlzx2q1bt++PTY2tqWlRXxFDKc0fH19nzx5QgLOT0xM+Pj4UBQ1PDwsl8txXBOKokJDQ4eGhtwqTPplfMSBICbGOwAAc5gpvRA7pjd5h5kz1DkjVLhAGG2dTme1WnEYbZVKhWOk4+8I4fUcvo7Qf8PUs/8XMz4ZMDIyolKplEplR0cHyczIyEhPT29vbyd/yYXzBWAMYGRkJC0tjWwXWa1WpVLZ3NwcFhbG2KKYsqmhoaHU1NRDhw6RnMrKSpw8f/48iYcoXJE9PLY06KSmptbU1LArcsZZEVmYrhF6SfGR4QEAmItM7WPYcYr6BEOdM0KFC4Twoq+rSCQS8r5uR0cHXn7h6wgJrpUxoohjcnJywsLC6DljY2NlZWUajUYqla5Zs4a8ssuXLwAeJwmOK5FIUlNT6QUKCwtlMll9fb1wO+ymZDJZYWEh/XEGjUZjMBgQQg6HQ61Wk3BVAhXZPpgtDUJlZWVKSsqUbz67VZihEXpJkZHhAQCYo3iyH9MnLtQ5cj+MNiPJ1xES9DHsKOI9PT1KpTIqKur06dPs6Tidzo6ODvYeNV8+p0DkcjnxwXq9PjY29uTJk/QByGQygU+wcDZls9kY7q2zszM2NpYk8/LyyBMEAhUZ8hGQRnNzc2RkJHnwTFhN4gszNMK2kykjwwMAMEfxcK1sNvuY/Px8+vUdIZSUlFRVVXX9+nWVSsUXfqOzs5O+Rz1lPh3O/XZ6LfG73MIli4uLZTIZUYRCoUhJSZmyIuMQnzQMBkNwcDA9LLGAmtwqzNAIo6TZbMZPQpPVRQAA5g1Tb26zv3HicrmcTue9e/dWr15NUZTJZAoLC+Osq1arfXx8/v7774iICIqijEYj403JKRHZEWFycvLKlSsVFRUk54cffrBYLC0tLUuXLk1MTKyoqMDfPnn8+DHZuMYd4R1yvny3wN/CcreWMJOTkxcvXtTr9eQL8M+ePYuOjh4YGKB/lUcYPmk8evRIq9XW1dXR31pVqVQOh2N0dBTv5FutVrVa7W5htkbo7Nu3r7GxsaCgwGQyBQYGeiAWAABmNR74JZGhzjFuhdFmJAUCpNPD1Pf395PbHUYcb4fDER4eTnabTSaTXC7v6enB8fIaGhpsNpvdbse1qqur+fKnFAh5N8XpdPb29m7atIn+0dznch9z9epVxkPMCKGsrKy6ujrhiuQQnzRcLldKSkpxcbGTBi6Tmpqq0+nIF84PHz7sVmHEFVndbDYTdYuJDA8AwNzFQx8jJtQ5xt0w2ui/PkZMmHqn0ymTybC/YcTxrqqqYnz1vaSkJCkpCSHU0tKSlJTk7+8vl8ujo6MbGhpwAb58YYHQ3bZarS4oKCC78XyS4WuKr2ReXh79ATPMuXPn8A6NGB/DJw3G+CmKIuqgv9KPX913qzDiiqx+6dKl6OhoMdIAAGCu8xJCyN1bn7t370ZFRf3zzz/uVvReRx988IHBYPjpp5/Wrl373XffrV+/3ttjA0TC0MjTp0/XrVt3+PDh3bt3z+zAAAB4AcxYbP/nS21tLd43gjjesw2GRpYsWdLY2PjWW2/N1HgAAHiRzBMfs3jx4jfffNOrXQQFBXHmWywWPz+/mWpqLgIOBgAWDvPEx7wA2M/XYTzwCs+xKQAAgNmMJ/sxAAAAACCGefKNMgAAAGAWAj4GAAAA8BbgYwAAAABvAT4GAAAA8BbgYwAAAABvAT4GAAAA8BbgYwAAAABvAT4GAAAA8BbgYwAAAABvAT4GAAAA8BbgYwAAAABvAT4GAAAA8BbgYwAAAABvAT4GAAAA8BbgYwAAAABv8X/vI9JEEqL5DAAAAABJRU5ErkJggg==)

HTTP POST data:

![](data:image/png;base64, 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)

Research’s Comment:

![](data:image/png;base64, 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)

Screenshot: laptop-adapters.org  vulnerability

Mirror: Click here to view the mirror

Coordinated Disclosure Timeline

Vulnerability Reported: 25 April, 2020 16:19 GMT
Vulnerability Verified: 25 April, 2020 16:27 GMT
Website Operator Notified: 25 April, 2020 16:27 GMT
a. Using the ISO 29147 guidelines
b. Using publicly available security contacts
c. Using Open Bug Bounty notification framework
d. Using security contacts provided by the researcher
Public Report Published
[without any technical details]: 25 April, 2020 16:27 GMT
Additional notification email sent: 28 April, 2020 03:02 GMT