Lucene search

K
openbugbountyPapix2020OBB:1152273
HistoryApr 28, 2020 - 9:05 p.m.

rino-sklep.pl Cross Site Scripting vulnerability

2020-04-2821:05:00
Papix2020
www.openbugbounty.org
6

Open Bug Bounty ID: OBB-1152273

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:

&nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence;
&nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence.

Affected Website: rino-sklep.pl
Open Bug Bounty Program: Create your bounty program now. It’s open and free.
Vulnerable Application: Custom Code
Vulnerability Type: XSS (Cross Site Scripting) / CWE-79
CVSSv3 Score: 6.1 [CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N]
Disclosure Standard: Coordinated Disclosure based on ISO 29147 guidelines
Discovered and Reported by: Papix2020
Remediation Guide: OWASP XSS Prevention Cheat Sheet
Export Vulnerability Data: Bugzilla Vulnerability Data
JIRA Vulnerability Data [ Configuration ]
Mantis Vulnerability Data
Splunk Vulnerability Data
XML Vulnerability Data [ XSD ]

Vulnerable URL:

![](data:image/png;base64, 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)

HTTP POST data:

![](data:image/png;base64, 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)

Screenshot: rino-sklep.pl  vulnerability

Mirror: Click here to view the mirror

Coordinated Disclosure Timeline

Vulnerability Reported: 28 April, 2020 21:05 GMT
Vulnerability Verified: 28 April, 2020 21:20 GMT
Website Operator Notified: 28 April, 2020 21:20 GMT
a. Using the ISO 29147 guidelines
b. Using publicly available security contacts
c. Using Open Bug Bounty notification framework
d. Using security contacts provided by the researcher
Public Report Published
[without any technical details]: 28 April, 2020 21:20 GMT