Lucene search

K
openbugbounty1orzeroOBB:1156625
HistoryMay 05, 2020 - 7:23 p.m.

vodnisklo.cz Cross Site Scripting vulnerability OBB-1156625

2020-05-0519:23:00
1orzero
www.openbugbounty.org
7

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:

&nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence;
&nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence.

Affected Website: vodnisklo.cz
Open Bug Bounty Program: Create your bounty program now. It’s open and free.
Vulnerable Application: Custom Code
Vulnerability Type: XSS (Cross Site Scripting) / CWE-79
CVSSv3 Score: 6.1 [CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N]
Disclosure Standard: Coordinated Disclosure based on ISO 29147 guidelines
Discovered and Reported by: 1orzero
Remediation Guide: OWASP XSS Prevention Cheat Sheet
Export Vulnerability Data: Bugzilla Vulnerability Data
JIRA Vulnerability Data [ Configuration ]
Mantis Vulnerability Data
Splunk Vulnerability Data
XML Vulnerability Data [ XSD ]

Vulnerable URL:

![](data:image/png;base64, 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)

HTTP POST data:

![](data:image/png;base64, iVBORw0KGgoAAAANSUhEUgAAAiEAAAA3CAIAAABVZQ1/AAAACXBIWXMAAA7EAAAOxAGVKw4bAAARsUlEQVR4nO2dfUxTVxvAr1ih1isftS0I1UA1SozZOsOQOWIMY64hhDWEMYaNQ2ccMwSRMKdkcx0x1TBciDokCzNuM84shBD+cGxRshDCTIdYWWVNRQa1VoIVi6vsgh3n/eO87819ez96+bh8uOf3V8/HPec5z3PPfc4599zTJQghAgAAAAAkIGy+BQAAAACeW8DHAAAAAFIBPgYAAACQCvAxAAAAgFSAjwEAAACkAnwMAAAAIBULwsckJSXdunWLLwhIBOgZAACpmX8f8/vvv09OTr744oucQUAiQM8AAMwBIXzM4ODgypUrOZNGR0dPnDjBFxRPS0tLTk4OX3AhMzg4GBMTI5yBT3vCGUJeOHPmXs9TbdTDhw937dq1atWqhISEQ4cOjY+PEwTx+PHjPXv2qNXqhISEjz766NmzZzjzoUOHli9f/s0330giOj/MeoNkGB8ff+edd6S241QRtsJsqZGuJWQfmTlnzpxJSkpasWLF1q1br127JmldwHRAggwMDJAkKSZJIKcwqampP//8M19wITMwMBAdHS2ch6Io4RI4lTZtZYpn7vU81UYZDIa9e/d6PJ6+vr6MjIyKigqEUE5OTmFhodvtdjgc6enpR44cQQh5vd6wsDCbzRYIBKSSngtmvUEyUBS1Y8eOvLw8qe04VQSsMItqpGsR00dmwunTp3U6XVtbm9frbWxsVKlUHR0d0lUHTIN59jEejyc6OnpiYoIzuMCZef+ZLx8zL3qeUqP8fr9cLvf7/ThotVrXr18/Njam1WqDIqda8izCrJfdHY4fPz5fggkgvkfPBLfbvWXLFvwjNTV1VsrkJD4+vq2tjQ7W19dnZ2dLVx0wDUT5mNra2sTERKVSaTKZfD4fQsjn89EzoQsXLjCDp06dIkmyurpao9FER0fv3r17bGyMr/z6+vr8/Hx20Gg0VldX40ibzRYeHo7rRQjt379//fr1AqkVFRXCl+MRMSY/P//48eN0MC0t7cKFCwghv9+/f/9+lUql1WrNZjM9snO73Tt37iRJcsOGDRaLBfsYrKWamprExMTo6OjCwkJcXVCntVqt6enpJEnGx8fn5ub29vYyM9jtdqVS2d7ezr6QTxgmgUDgyJEjGo1GoVDk5eV5vV7EOomOU+1sqRBCFEXt3buXJMm1a9ceO3aMrtFqtaalpcnlcpVKlZeX53a7aWktFotKpYqLi2toaOCUh+9eEkNHR8emTZuCIi9durR9+3av18u8FfnUxRaSaTWFQpGfn+/1eisqKlQqlVKpLCoqop0ZJ8x6z549GyQDRuRTm9MEfFaYiQkQf48OUqNIHYo0H6a1tVVkBk6FsLvquXPnCIJgDpUmJiYGBgamJBUgNaF9DEEQRUVF9JJFcXExTnI4HCRJUhSF7z862N/fTxBEXl6ey+Xq6+vbvHmz2WzmKz8rK+vixYvsYENDw86dO3Hk8ePHZTLZ5cuXcVCn01VUVAiktrW1CV/OHPg0NjampKTg3x6PRy6X4y63d+/e7Oxsl8tlt9u3bNly+vRpnMdoNDKbRvsYgiB2797t8XicTmd6evqBAwcQ6xGj0WgaGhpGRkb6+/u/+OKL/v5+OoPP59uwYcNXX31Fq515IZ8wTCwWS0pKSk9Pj9vtLi0txb6K+h+HDx8uKCjgVDtbKoRQZWVlQUFBf39/b2/vjh07zp49izPX19efP3/e5/MNDQ2VlZUZjUZm84eGhlpbWx0OB6c8AvdSSAwGw8mTJ5kxDocjPj7earUi1q3IqS62kDjGZDK53W5sNZVKhcVzOp07duwoLS0VlopZb5AMnHbkg9MEfFaYiQmQ6B4tUocIIRULvmbGxcVlZGR0dXWxk6xWa0ZGRlxcnIBC2F31jz/+kMvlIdULzC+ifMyTJ09wsLOzU6fT0Umca2X4EpfLheObmproO8PlciUmJtKX+P1+kiRHRkbYQY/Ho1Ao8MuM1NTU8vLywsJCXHhkZKTL5RJInZiYEL6cOfAZGxvDBSKE6urqcnJyEEKBQIAkSbqrt7S0pKWl4Xi5XM5sGtPH0Frq6OjAWmKqaGRkRCaTBb2eoTNkZWVht8TWLZ8wQWg0mu7ubnY8Qshut69duxYPY4P0zCkVQkilUtGjeJvNxrnc0dfXhx8KuPm0HfnkEbiXhDGbzZmZmcxnt9vt1ul09LhBjLrYQuIYei7V0dERFhZGz7k7OzvxQpwAAmtlApFB8JkAibDCVE2AxPVo8TpECLlZ8LXU7/dbLBalUpmfn+90OnGk0+nMz89XKpUWiwU3lk8h7K7KVC+egKpUKpE3FTBnTO19DPMNhICPYQ4uent7NRoN/h0IBDweD53U1NSUkZHBF9Tr9W1tbUNDQ1qt1ufzaTSaQCDQ0NCQm5sbMlVMBpqCggI8TMvMzMSje4/HEx4eTmdwOp24J+PRE7NpzLUytpaC4gsKCvR6fXl5eU1NzS+//EJnqKysDAsLO3/+PKfa+YRh4vP5ZDIZ36vabdu2NTc38+mZLdXIyAhBEPSwVKlU0hbs7u7OzMyMj4/H8ZzN5JNH4F4SGAU3NzfrdDraQWLS0tKYkzkx6mILKSAPO8jJrPgYxGUCxG+FmZhAuNV0kngdToORkRGj0SiTyXBQJpMZjcagVVNOhSBWV3W73XR/9Pl8brf7+vXrkm4xAKaBLOTGs1lk6dKlq1evpoPCu5azsrKuXr3a39+fnZ0dFRWl1+vb29uvXr2alZUVMlVMBpr8/PyzZ8+aTCar1drU1CRd87///vsbN27Y7XaPx1NeXr5t27aKioqxsbGmpqbLly+XlJTk5uZGRUVNu/ylS5eyI7/88kudTvfmm2/SMUF6ZkuFfV5XV5dM9t/bIyzsv3vcjUbjvn376uvr5XK52+02GAxTlYcTm83GGX/79u3i4uLW1tZVq1bRkQ8ePOjp6fn1119FFr7wYZvgzJkzFEVxWkEiE0wbtVodFPPw4UO+zHfv3j127Fh7e3tVVRWOqaqqqqmpOXDgQFVV1bp163Akp0IIVlednJykKOrZs2fLli2LioqKiooaHh5WKBTSNBSYLsIuaHrzGIKxVtbc3EyvlTEJBAIqlYqejwcFEUKdnZ2pqak5OTlXrlxBCNXV1ZWWlsbFxeGZkHCqmAw0FEUplcra2lp6iiNyray5uXlK8xgmNptNq9UODAzIZDL8SjM7O7ukpIStW/FrZTabLSjS7XYnJyczFzfYemZLhRAiSZK9zDI8PEwPP3FmgWay5RGeN7AZGRlZv379pUuXguIDgUCQ/CLXyhbsPIYJbQLEZYUZmoCdk7NHi9chmspaWXFxMUmS5eXlQbNSr9dbVlZGkiTn+zmmQthdNT4+njnRqampMRgMfAIA88L0fYzf75fJZPS6Kh3EPgbveLHb7Xq9nvnOn15mbW9v37x5Mx0fFMRoNBqNRoMvcbvdkZGRer1eZGrIDMwF38LCwsjIyB9++IGO2bdvX05ODt87f7pp4n1Mb2+vwWDAG/ldLte+ffuys7OZGRwOh1wu7+npQQg9efJEJpM5HA681sEnDLMJFoslNTUVv+AtKSnBL3hzc3MbGxvpN/9sPXNKhRAqLi5OS0vDA8nq6uqqqipapXV1dT6fz+l0Go1GgQccW54p+ZhAIJCZmVlaWkox4LQdWwBOdS1YH8NnAsRjhZmYQLjVzCSROpwSJpNJYNPXwMCAyWQSVghidVX6+5jh4eGLFy8qlcrOzs5pSwhIwfR9DELIbDYrFAp6syYO4r3LJ0+eZO9dDnpHV1lZSRcVFMQUFhbm5eXRwZSUFGYe4VThDEHtam5uJkmSucdazN7lmpoa8T5mYmLCbDZv2LAhPDxco9GYTKahoaGgC0tLS7dv345/HzlyhNatwEZS+tpAIHD48GGVSiWXy41GI9/e5SA9c0qFEKIoqqysTKvVKhSKrKwsekjb3t6ekpIil8vj4uLKy8sFHnBseabkY/BIhQnzURh0YVDJYtQlYDUx4rFLmLaP4TMB4rHCTEwg3GpmkkgdSoGAQhBXVz19+nRiYmJ4ePiWLVuYW0aBBcISxHoSzZDBwcHNmzf/9ddfwtk2btz47bffbt26lTMISAToGQCAuWTefAwAAADw3DOn+8r+Pdy6dau+vh5/h8zm2bNnu3fvrq2tjY2NnWPBgKnC3jeF6e/vn9J5l7NVDgAsLsDHSEJRUVFBQQFf6rJly8LDwysqKr777ru5lAqYBnz7qqfqGGarHABYXCyOtbLBwUG9Xv/48eNZLHN2GR0draurO3r0KEEQjx490mg0Y2NjERERg4ODiYmJzJwGg+HHH3+8efNmVlbWgwcP5kdcAACAOWH+/6Ps+cDn81ksFvzb7/crFIqIiAgcxGdA0bS0tBAEoVQq/X7/vIkLAAAwJ8Ba2VxA+xsAAIB/FaHnMU+fPn3//ffVavWaNWs+++yzf/75B//J3alTp5KSkmJiYnbt2jU6OjqNcnD8b7/99sorryxfvlytVr/11lv379/H8ffv33/jjTdWrly5cePGS5cuCZSM5fn8889jY2NjYmLefffdv//+m44/ceKEWq1evXr1119/zScGs0UrVqx4++23Hz169OGHH6rV6lWrVu3Zs+fp06cCFY2OjiYmJvr9/iVLlrD/Q3BycvLgwYOxsbGxsbGHDh2iG87kp59+CqlAAACARUdoH1NaWurxeLq7u1tbW1taWurq6giC8Pv9PT09nZ2dVqvV5XJVVlZOrxyCILq7u/fv3z80NGS327VabUlJCY4vKSmJjIzs7e29cuUK08eoWWB5rFZrV1dXV1dXd3d3dXU1zuz3+x0Oh91uv3DhQnp6uoAYfr/fZrN1dHTYbDaPx5OcnOz1ent6eq5fvz4wMEA3kLOiqKgo+lx0k8kU1PCxsTGSJO12e2dn59WrV2tra9nKKSoqeu21127cuBFSjQAAAIsJ4U80OU8u4jvKHsP3ybGYQ7fos8r5TtFHXOcjDfD8mwD7KHLhQ8tDHvPOVxHi/+Sboqjr16/TAjQ3N+MT2tmfprOPPQcAAFjshJjHDA8PT0xMJCUl4WBycjJ+zpIkSe+51Gq1+BzyaZRDEMTNmzdff/31hIQEtVqdmppKURTOTxDEmjVr6Px0UQksCIKQy+XMzC6XC/8mSTImJkaMGCRJ0mcea7XayMjI5cuX42B8fDz9L4F8FfERERHB/Kie75IVK1YcPXq0r69vYmJi06ZNwmUCAAAsFuZ/X5nRaNy+fXt7e7vNZrty5UrI/JxrZYuIyclJzvi7d+/igwvpY88BAAAWOyF8jEajCQ8P//PPP3HQ4XAEfe0hEr5yHj586PF4Pvnkk3Xr1iUkJMjlcjo/QRD37t3DQafTSRdlY0EQBEVRzMxr166VqDkiK6K5du3aSy+9RAd7e3s5a/zggw/0en1cXJzT6cQf2QAAADwHhPAxS5cuLSgoKCsru3fv3u3bt81mc2FhoZhyx/8fgiA4y1Gr1Uql8ty5c6Ojo3fu3DGbzXS9BoOhvLz8/v37OD9dMudaGUEQzMzZ2dmz2xwmnBWpVCqKou7cuUMQRFhYWCAQwPEpKSlut/vTTz999OjRzZs3jx07hjcFBAIB+r+nCILw+/12u/3UqVPMP+MCAABY9IR8Y8M+5TvkoejsWurr6/lOy+c8qxzxnKLPCZaH/W8CnLsPxBxaznfMO19FGPqfDiiKksvl9Kv7rq6u9PR0kiR1Ol11dTWObGxsfOGFF0IqHwAAYFEz+2fJzD1zdtKz+IoOHjxot9uvXbvGmTo+Pp6cnPzxxx+/9957sy0jAADAAgK+85eEmpoavjMQCYKIiIi4ePHiq6++OpciAQAAzD3zv6/suWTZsmUvv/yyQAZwMAAA/BsAHwMAAABIxfPwPgYAAABYmMA8BgAAAJAK8DEAAACAVICPAQAAAKQCfAwAAAAgFeBjAAAAAKkAHwMAAABIBfgYAAAAQCrAxwAAAABSAT4GAAAAkArwMQAAAIBUgI8BAAAApAJ8DAAAACAV4GMAAAAAqQAfAwAAAEgF+BgAAABAKv4DV55V5tcSRQYAAAAASUVORK5CYII=)

Research’s Comment:

![](data:image/png;base64, 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)

Screenshot: vodnisklo.cz  vulnerability

Mirror: Click here to view the mirror

Coordinated Disclosure Timeline

Vulnerability Reported: 5 May, 2020 19:23 GMT
Vulnerability Verified: 5 May, 2020 19:39 GMT
Website Operator Notified: 5 May, 2020 19:39 GMT
a. Using the ISO 29147 guidelines
b. Using publicly available security contacts
c. Using Open Bug Bounty notification framework
d. Using security contacts provided by the researcher
Public Report Published
[without any technical details]: 5 May, 2020 19:39 GMT