logo
DATABASE RESOURCES PRICING ABOUT US

moskva-kolyaski.ru Cross Site Scripting vulnerability

Description

Open Bug Bounty ID: OBB-1156736 Following coordinated and responsible vulnerability disclosure guidelines of the **[ISO 29147](<https://www.iso.org/standard/45170.html>)** standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence. Affected Website:| **[moskva-kolyaski.ru](<http://moskva-kolyaski.ru>) ** ---|--- Open Bug Bounty Program:| **Create your bounty program now**. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| **[XSS (Cross Site Scripting)](<https://www.owasp.org/index.php/Cross-site_Scripting_\(XSS\)>)** / CWE-79 CVSSv3 Score:| 6.1 [CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N] Disclosure Standard:| Coordinated Disclosure based on **[ISO 29147](<https://www.iso.org/standard/45170.html>)** guidelines Discovered and Reported by:| **Dipu1A ** Remediation Guide:| **[OWASP XSS Prevention Cheat Sheet](<https://github.com/OWASP/CheatSheetSeries/blob/master/cheatsheets/Cross_Site_Scripting_Prevention_Cheat_Sheet.md>)** Export Vulnerability Data:| Bugzilla Vulnerability Data JIRA Vulnerability Data [ Configuration ] Mantis Vulnerability Data Splunk Vulnerability Data XML Vulnerability Data [ XSD ] Vulnerable URL: ![](data:image/png;base64, iVBORw0KGgoAAAANSUhEUgAAAiEAAAA3CAIAAABVZQ1/AAAACXBIWXMAAA7EAAAOxAGVKw4bAAAROklEQVR4nO2df0wT5xvAT6xwwIFYoFbt5o8YVGK0M0owQ7Oo0YV0pDKtDhliNIqGOUfQiSMOnUOiSBhjxDhndCMbWzbCCDHMdMR0jDhUVmtlWNHUWiubBSk7a8Xqff94s/d7ud4dV2gR9Pn81fe9933e533e5+6597njGMMwDAEAAAAAQSDkeSsAAAAAvLBAjAEAAACCBcQYAAAAIFhAjAEAAACCBcQYAAAAIFhAjAEAAACCxYiIMdOnT79y5YpQEXi+wHIAowvw2BHF848xV69effbs2fz583mLwPMFlgMYXYDHjjQGiDG3b9+OioriPeRyuQ4fPixUlE59fX1aWppQMYCIzGXYxAZWByFpARwleMsx/AzCLA8ePNi0aVN8fPyUKVM+/PDDJ0+eBEk3vzhz5sycOXPCw8PnzJnz+eef+za4f//+uHHjfvvtN3bl7du3x4wZc/XqVU7j77//fsKECQTLPrdv30Y1fsEx7wcffBAeHn7mzBl/5QyRwXlsAE+ZgFjvRWLw+5je3t7i4mKhonSGLca8PEydOtXpdAZE1Eu+HNnZ2f39/UajsampqaWlZf/+/c9bI+LLL78sLCwsLS212+3Hjx+vqKj45JNPOG1qamooivr22299u5eVlXFqysvLA6IY2+u6u7srKiouXLiQmZkZEOHSeck9diTCiGK1WimKknJIpKUIDocjJiamv7+ftxhYBqdhYMUGVocgzQgT1OUYfvw1l9vtVqlUNE2jYmtr68yZM4Ojmh+oVKpz587hYltbW0REBFYSkZycXF1drVQq2WtntVplMllERITD4cCVLS0tJEnGxMQwDGO32xcsWIB+JCUlDUXJYHumEIP22AAqbLVakT2flwIjDUn7mM8++2z69OmxsbHvvvuuy+UiCMLlck2bNo2m6TFjxpw5c4ZdLCsri4qKOnr06MSJEydMmLBx48ZHjx4JSa6vr1+5cuW4ceM4RbRzPHbs2PTp0yMjI9etW9fd3b179+74+PjY2NhNmzY9fPgQdXn48OG2bdvi4+NfeeWVAwcOPH36FNVfvHhxyZIlUVFRU6ZMefvtt//66y/2uNeuXYuNjUXJhHXr1n366af40OLFi9EG/+LFi4sXLw4PD4+Pj1+7du3du3cHNBRbrIhumC+++GLVqlW4+NFHH23cuFFoXOkzEs+hHT58OD4+ftKkSV999RWnJWebH+zlePr0aUFBwcSJEyMjI9euXdvd3S0kZPXq1UePHkVHr1y5EhYWhvyQIIht27bt3r3bd5pCHujrzELtw8PD79y5ExkZiTp2dnZOnjxZqLGvbQkBF5JuTF9cLpfdbn/jjTdwzWuvvXb+/Hl2m5s3b9rt9g0bNixYsODs2bPsQyRJajSayspKXFNeXp6RkYF+T5ky5fLly+jHH3/8gSp/+eUXIWU4DbAvdXd3sy8OEi3jl1keP368efPmqKioqVOnfvzxx9jN2NcTXldkjzJhwoQNGzZgR+LA213o3Lx79+6qVauioqJmzZrFu31kI+XCIjTB0cjAMYamaaPR2NLS0tra6nA49u7dSxDE+PHjOzo6KIryeDyZmZns4urVq2mabm1tvXTp0qVLl9ra2o4cOSIkXCRRhsZtbm42Go0Oh2P27NlOp9NkMl24cMFqte7btw8127lzp8PhaGtra2xsrK+vr6qqQvUajSY7O9tmszU3N6ekpJAkiUdxuVzp6eklJSVLliwhCEKn09XV1aFD9+7dMxqNWq2WIIi2tratW7d2dXWZzWaVSpWbmytuKI5YEd0wWq3WYDD8+++/ePrp6elC40qfkQg0TXd0dJjN5tOnT6ekpIg3DvZyHDlyRK/X6/V6i8UyefLk9vZ2ISEajUav16OjDQ0Nz549a2xsREW9Xp+amuo7TV4P5HVmkfaY69ev5+fnl5aWigvn2FZoKSUaM94HmqZJksT3ZIhFixbhQEgQRHV1NQobmZmZvte7/Pz848ePo7h4586dxsbGHTt2CHoAQWRnZy9fvhzFHg4XL15cvnx5dnY2pz42NpZ9cZBuGYlmIQji4MGDbrfbZDI1NjYaDIbjx4+jerbHCrkiTdMmkwn5gM1mY4tlw9tdaEFzc3Ojo6Pb29vPnj3LtrnvCooIYSM0wVGJ+DbHarUSBNHX14eKLS0tM2bMwId4c2Woi81mQ/W1tbULFy5Ev20227Rp03AXmqYpiurp6fEtIiG9vb3oUHNzc0hIiNvtxmqgrIXX66Uo6tatW6i+vr4+OTmZYZienh6ZTObxeDhzQRqmpqbu2LED17vd7ujoaKRwVVVVWlqarx06OzuVSqWQiXjF8urmuyNOTk7+8ccfsRyOznhcv2YktO9GVsUG923J3uYHezkYhlEoFG1tbZxKXiEOhyMiIgJJSEpKysvLy8jIQIpFR0dzciNCHijkzCIei7Db7TNmzKipqRlQONu2HPBSSjQmGpeDlIxKQkKC2WxmGMbtdisUCjxf3Hfp0qWVlZUMw+zZs2fr1q3iuR2apouLi+VyuU6ns1gsqNJiseh0OrlcXlxcjNN0bN04v6VYRrpZGIaJi4vD4xqNRpTZY3uskCtyfKC5uRn7ANuwQt191UaNSZJkuwS2p+8KCgnhKMA7wVGKf89j2O4oEmNIksT17e3tCoUC/fZ6vexccG1t7bJly3iLIuOyiw6HIzQ0FNdbLBYcCdavX69Wq/Py8kpLS8+fP49l7tu3LyQk5NSpU+xprl+/vqKigmGYFStWVFdXo8q2trYVK1ZMnjw5Li5OLpejEeNYsFX1Fcurm+81oqSkJDs7m2GYyspKnU4nNK5fMxKJMZx6ETsHezl6e3tlMpnX6+UoKSRErVY3NTV1dXWpVKre3l6FQuH1ek+ePJmenu47TV4PFJqFiMcikpOTkXtIF47gXUqJxuTFbrezR/eltbUVPVNBZGVlnT59GktG49bX18+cObOvr08ul3d0dEh5ftDT06PVamUyGSrKZDKtVovjAUe+yG+Mr2Wkm6Wnp4cgCHwayuVytARsjxXyIhEfYNcLdeddUIfDwXEJcXsO6BVCExylDOvfx4wdO3bSpEm4GNQ3yr777ruTJ0/Omzevv78/Ly/vvffeIwjC7XbX1tbW1NTs3buXnYdF6bIHDx60trZiHbRa7dKlSw0Gg9FoxHltIwvcXUisFNLT05HwhoaG9PR0oXH9ndHQGYblIAhi7NixEiWkpqbq9fqGhgaNRjN+/Hi1Wm0wGHgTZYHl3r17JpMJK+wXQkspEd9MC9rpcl6hvnz5Mn5WUV1d3d7ejtvX1tZWV1dzxL711lsymUyn0yUnJ8+aNWtANW7evJmbm2swGA4ePIhqDh48aDAYduzYcfPmTX8nhRiKZTweT0hIyKVLl9BpaDKZ0Mk4DG+U+as2b65sQCFCExytiIegwe1jCFYyoa6ujpN5QHi93ri4OLwb5RQl3tRI2dIyDGM0GlUqFXqvpr29nWEYjUaTm5uLG3g8HrlcXl5ejm+K//nnH3zXhiQI3ZsIiZWYK2MYZu7cuXq9PiYmpq+vT+K44jOSvo/p6+sLCQlhpw6wYYO9HAzDKBQKo9HIOSokpKWlJSkpKS0t7ezZswzDVFVV7dy5U6lUsnfGWB9eDxS5hxXxWK/Xi5WRLpwRdiHpN+y8mRaVSqXX63F7s9mM3yvzer1KpbK1tRW3t9lsMTExyETscU+cOEEQBJIjvo/JycmhKCovL8/pdLLrnU7nrl27KIrKycnBmkvcx/Baxq/tHUVRnCyr7/VEKFcmZR/D211oQTm5srq6OpEVlOgVvhMcvQw+xtA0LZPJcIoWF9FJuGbNGrvdbjab1Wp1UVERloCT8gaDYe7cubieU5TucFu2bElLS7PZbGazecGCBSin0d7e/uabbzY1NTmdTpvNtmXLFo1Gw5bZ0dFBkqTJZMIyMzIyoqOjf/jhB1yjUCiqqqp6e3stFotWqxWJMUJifXXr6+uTyWQdHR3sHNH+/fvnzZun0WhExvVrRhzrYZvzxp6kpKQtW7Z0dXVZLJaUlBQ03DAsB8MwxcXFSUlJJpPJbrejO2URIcgyCoUCTcdut0dHR6vVat5p8nqgeIwR8li2ZOnCRZZyKLkyhmFOnDihUqkaGhqcTqfBYEhMTDx06BA61NjYmJiYyGm/Zs2asrIyzrgej6epqUnKiJmZmVarVeio1WrNzMzEv6Xnynwt45dZcnJykpOTzWazw+E4cuQI2lexPZYR8CKhUXxPTN7uQtcErVbLdgnxFeQVwlHAd4IiAkc4g48xDMMUFRVFRETghC8qHjt2jKKokpIShUIRExOTlZWFH9yxpeXn5+/btw+L4hSlOxxN01u3bo2Li1OpVEVFRWiF+vv7i4qKEhISQkNDFQpFZmZmV1cXR+bOnTuXLl2Ki3V1dRRFYVUZhjEYDAsXLiRJUqlU5uXlSYkxHLG8uu3du5dtNIZh0EYY1/CO69eM/DrbOzs7ly1bRlFUYmJiRUUFGm4YloNhGK/Xu2fPnri4OJIktVotvlPmFcIwTEZGxpo1a/C4CxcuxEr6TtPXA8XvYXk9lneyUoSLLOUQYwzDMKdPn549ezZJkgkJCTgAMwyTlZW1Z88eTuNTp06hJzQiu9tB/D0HrxzpXudrGb/M4vF4du3apVKpIiIiUlNTb926xfFYRsCLREbhnJi83YWuCXa7feXKlRRFJSQklJaWittTSAhbAd8Jiggc4QwQYwaBkCtzSEhIuHDhglDxpQK9kCry4s3wM6qXQ6IHDq69v8KB4WFUe+yLjWy4n//8x/Xr10WKLxXnzp1LSUkZxDeOgsfLvBzAaAQ8dsQy1PfKrly5sn37dpEGT548eeedd/7+++8hDvSi4nK50FvLz1sRAACAwDPUGJOdnT1t2jSRBuPGjQsNDc3Pzx/iQC8qOK3/vBUBAAAIPGMYhvG3j8vlqqqqKigo6O7uVigUbrc7LCwMHbp///6uXbsaGxtJktTpdCUlJWFhYX/++Wdqauq9e/cCrTwAAAAwohnMPgZ/xp+m6YiICBxgCILIysoiSdJsNhsMBpPJVFhYSBCEXC6naTpQGgMAAACjhUA+83/48OH58+edTif6Ql9JSUlGRgb+XC4AAADwsiHp/2Cyv8vN/oz/Tz/9xG4cGRn56NEj/AnY/v7+0NBQX5kDfi0cAAAAeDGQ9G1/9ne5OZ/xF+l46NAh3kfZIl8LBwAAAF4kJD2PKS8vnzhx4qpVq9AX9NA//wgLCwsJEex+4MABr9fL+zpZZ2fnihUrVq5cuW7duhs3bgxWcwAAAGCkM3CMoSjK3z8P/Pnnn7/++uuamhrer+pGRkYWFBR0dnb29/cnJib6JRkAAAAYRQT+2/7Xrl3Lycmpra2NjY0VauP7tXAAAADgxSPAMebBgwdarbasrGz+/PlCbbZv365Wq5VKpcViKSgoCKwCAAAAwMhhMO8ux8XFeTyeGzdukCTp9Xpx/dOnT3U6XWpqanp6+uPHj1FlWFiY1+uVyf4/EE3TZrN56tSpQ1QdAAAAGOEMZh8TGRlZWFioVqvPnTtHEAR+bm+32/V6fUVFBfkfSqWSIAij0fjqq6/i7t988w0EGAAAgJeBwXxLhs37779vNpt//fVXoQaPHz+ePXt2YWHh5s2bhzIQAAAAMOoYaox58uSJ0WhctGiRSJvff//99ddfH8ooAAAAwGhkqDEGAAAAAIQI/LvLAAAAAICAGAMAAAAEC4gxAAAAQLCAGAMAAAAEC4gxAAAAQLCAGAMAAAAEC4gxAAAAQLCAGAMAAAAEC4gxAAAAQLCAGAMAAAAEC4gxAAAAQLCAGAMAAAAEC4gxAAAAQLCAGAMAAAAEC4gxAAAAQLCAGAMAAAAEC4gxAAAAQLD4Hx6PBT43LhsCAAAAAElFTkSuQmCC) --- Research's Comment: ![](data:image/png;base64, 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) --- **Screenshot:** ![moskva-kolyaski.ru vulnerability](/twimages/screen-1156736.jpg) **Mirror:** [Click here to view the mirror](<http://1156736.openbounty.org/mirror/>) ### Coordinated Disclosure Timeline Vulnerability Reported:| 6 May, 2020 06:35 GMT ---|--- Vulnerability Verified:| 6 May, 2020 06:50 GMT Website Operator Notified:| 6 May, 2020 06:50 GMT a. Using the ISO 29147 guidelines| ![](/images/done.png) ---|--- b. Using publicly available security contacts| ![](/images/done.png) c. Using Open Bug Bounty notification framework| ![](/images/done.png) d. Using security contacts provided by the researcher| ![](/images/done.png) Public Report Published [without any technical details]:| 6 May, 2020 06:50 GMT Additional notification email sent:| 15 May, 2020 04:18 GMT