sindjustica.com Cross Site Scripting vulnerability

2020-05-0619:59:00

1orzero

www.openbugbounty.org

JSON

Open Bug Bounty ID: OBB-1157020

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:

&nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence;
&nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence.

Affected Website:	sindjustica.com
Open Bug Bounty Program:	Create your bounty program now. It’s open and free.
Vulnerable Application:	Custom Code
Vulnerability Type:	XSS (Cross Site Scripting) / CWE-79
CVSSv3 Score:	6.1 [CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N]
Disclosure Standard:	Coordinated Disclosure based on ISO 29147 guidelines
Discovered and Reported by:	1orzero
Remediation Guide:	OWASP XSS Prevention Cheat Sheet
Export Vulnerability Data:	Bugzilla Vulnerability Data
JIRA Vulnerability Data [ Configuration ]
Mantis Vulnerability Data
Splunk Vulnerability Data
XML Vulnerability Data [ XSD ]

Vulnerable URL:

![](data:image/png;base64, iVBORw0KGgoAAAANSUhEUgAAAiEAAAAjCAIAAADNIk3yAAAACXBIWXMAAA7EAAAOxAGVKw4bAAALwElEQVR4nO2cW0wT2RvARyy1yhSltkWBzRZi0BjjEqOosWu8xUtiSHdVdBFXNAQvQUWC14cNa7JIsBqXNWQfMNGE6GZjSNNNzGqqMQ1pWMSmdhusDZrarQVNQTAjNlCZ/8NJTsaZOdNCGeCP3+9pzpk53/Wc+WbOUKaxLEsBAAAAgAwkTbQBAAAAwJQFagwAAAAgF1BjAAAAALmAGgMAAADIBdQYAAAAQC6gxgAAAAByMXlrTHZ29tOnT0lNYKRAAAHM06dPjxw5Qjo7NDT0ww8/vHnzZjxNAqYqk7TG/Pvvv8PDw998841oExgpEECAS0lJicFgIJ1NTk5WKpVVVVXjaBEwZYlRY169eqVWq0VP9ff3X7x4kdRMEKvVWlBQQGrGbyTp+rS0tNGN5YJdTkTI+IAD+O7duwMHDuh0uszMzDNnzgwNDY1IDvaUG0P5+O2337Kzs1NSUlauXPngwYMxkSlHssYnGonAXZ49PT1ut7uiooKiqFevXk37nG3btlEUVVFRYbPZJtJiYMrASuL3+2majueUxJWjID8///79+6SmkEgkEr9wv98/Z86c0Y3lycEuj1rI+IADWFBQUFRUFAwGvV6v0Wg8e/bsiORgl3kxlIP6+vqcnJyHDx+Gw+E7d+5otdqWlpbExY7tRMUy5Y5GgnC9Fh5HOAwODrLyRAn4MlFMdI0Toaury+fzrVu3TrQpyowZM0atLpGxYytEJnAAP3786HQ6vV5vSkoKRVFXrlwpKioa0dunQqHIzc3lHshHbW1tU1PT+vXrKYrasWNHOByura3966+/ZFX6ZTKZZy/w/05c32N+/fXX7OzsuXPn7tu3r7+/n6Ko/v5+g8HAMMy0adNu3rzJbV65ckWtVl+6dCk9PT0tLW3//v0fP35Ech4/fvztt9+q1erMzMwdO3Y8e/ZMVJ3Vat28eXNycrKwKSqBu4GjVqsvX76cnZ2dlpa2d+9eZC1FUa9fv96yZYtarV64cOGtW7ewLt5Ybj/e/RBVKnQZj/306dO5c+fS09NTUlJ27drV09ODhKxevXrmzJk6nW7Xrl2vX78WOi468MOHD4cOHdLpdF999dXPP//86dMnnqcpKSm7d+/u6ek5deqUTqebO3fugQMHPnz4IIznzJkz//vvP1RgKIrq7OzMyMiIPy8URWVmZj558gQd/PPPP6jz3r17pOuFFwh17d69+5dffsEXrF69Gs2oUChkNBpx/8GDB69duyYULoyPxDSQQDTOFDlxpBklBNkjXBGo/+LFizqdbv78+devXyeZEWe6SYp4q5Vn3vDw8IkTJ9LT09PT00+ePIkd5xIzxQBAInaNYRjG5XI5HI62trZQKHT27FmKombPnu31etFbdnFxMbf53XffMQzT1tbW3t7e3t7udDrr6uqQqO3bt5eUlAQCgZaWFqPRqFKpRDVKfIyJKYFhGLfbjawNBALnz59H/eXl5ampqR0dHXfv3pW+IwgRVcpzmXt9XV2dzWaz2Ww+ny8jI6Ojo4OiKKfTWVZW1t3d7fF4srKyysvLhYpEBx4/fjwUCjmdzr///ttqtTY0NHDz0tLS4nK5QqHQokWLwuGw2+1ubW31+/3YcWE8Ec+fP6+qqjKbzSQHdQJI8SkpKdm4cSOqPTweP368cePGkpISiWAWFhZaLBZ0tqury+VymUwmhmFUKhV+zqAoKjk5+euvvxaqEI0PaRpIQIozKXGkGSUaN9KKYBjG6/V6PJ4bN26ggppgukUV8VYrz/GBgQGapj0ej8PhsNlsV69eFQZHIsUAEAPprTS/309R1Pv371HT4XDk5OTgU6LfY9CQQCCA+pubm5cvX86ybG9vr0KhEP1uEQgEDAYDOmYYhqbp3t5eYZMkgacaW9vS0oKsjUajKpWKaxLePeeO5bmDrpEwmzRWr9c7nU5SSFmW7ezsnDdvnrBfODAajdI0/fLlS9S0Wq2rVq3Cnvb19WFPk5KSBgYGUNPhcCxYsAAd8+KJCAaDOTk5f/zxh4SDQQEkdxiGqamp0Wg0hYWFPp8Pdfp8vsLCQo1GU1NTwzAM6hTVNTAwkJqairLT0NBQUFDAfh7SqqoqrVar1Wrx3JOOD2kaIES/NJDizAMnTmJGCeNGWhGon5uaBNNNUsSSv8dEIpHW1lZsgMViyc/PF0ZJNMUAEA8j++bP/bYpUWNUKhXu7+jo0Ov16HjPnj15eXmVlZVms/nRo0f4mmg0GgqF0HFzc/OGDRvwKV5TVELMOhEKhXgmxV9jJMwWHdvX16dQKKLRKC+STqdz06ZNGRkZWq1Wo9EIPxGLDgyFQkqlEjd9Ph+6x0lYy2vyAohYtWpVfX09bpIcHBG9vb0mk0mhUKCmQqEwmUz4tiita8+ePcieTZs2NTU1sSwbDAZxyvr6+oLBYGtrqzBoovGJGRxhjSHFmSUkTmJGCSGtCKElCaZbYumRagwPr9crqhHBSzEAxMO4/j7m9u3bjY2NS5cuHRwcrKysPHbsGOqfPn36/Pnz0bH0Xy2TJEyI2RJMnz6d12MymdauXWu3210u1927d+MfmCDCjbKuri632831QtTB+PfKKIp68eJFeXm53W6/cOEC6rlw4YLdbj969OiLFy+4V4rqQttl7969a2trQ9aijR30p9WzZ8/OzMxUKpWzZs0am6CMhDgThxlR3CYhw8PDov3CFANAXEiXoNG9x1CcF3aLxYJf2Lm4XK6srCxeZzQa1Wq1eK+A1yRJiPkuwtvZsFgsQi/ev3+flJTE3WARfTLlmi2xV+Zyubij3r59y336c7lcosKFAyU2T+J5sBUNYDQaJYWU62D8e2WHDx+mabqysjIcDnP7w+FwRUUFTdOHDx+W1hWJRDQazdWrV7///nt8NiMjg/tSZTabt27dypNA2isb6XsMKc6kxEnMqJh7ZXhFCC1JMN0SS4/0HmOz2fLy8rCo5uZm0b0yUooBICajrzEMwygUCrw5i5toou/cuTMYDHo8nry8vOrqapZlOzo6tm7din7uEAgESktLt2/fjiWjPXq73b5kyRLcyWuSJMSz32UymbgmiVbK/Pz80tLS7u5un89nNBrRNRJmc13m6q2pqcnPz3e73cFgED36sSyr1+sbGhr6+vp8Pp/JZMIGcD9OiA4sLS0tKCgIBAIej2fZsmVoTynOmw4vgLxoS0c1foqLi/1+P+ms3+8vLi6OqauoqCg1NfXPP//EA/HvY96+fdvU1KTRaBwOh1C+MD7x1JjI50SjUdE4s+TEkWaUaAREV4RotUsk3SRF7OerNRAIcPchtVrtTz/9FA6HnU7nkiVLkMbOzk6uCukUA4AEo68xLMtWV1fPmjXrxo0b3Obly5dpmq6trdXr9XPmzPnxxx/Rx8nBwcHq6urc3FylUqnX64uLi7u7u3laqqqqzp8/j+XzmiQJ8dSYYDC4efNmmqZzc3PNZrNojens7NywYQNN04sXL66vr0fXSJjNcxl3RqPR06dPa7ValUplMpnQo5/dbl++fLlKpZo3b15lZSW+KcQcyDBMWVmZVqvNysqqrq5GH2zivOnwAih6sbSDY4uELovFQtM0/o6NqK+vNxgMSqVy2bJlDx8+FJUpjE/M4Ajf5n///XfROLOExLHkGSUE2SNcEaI1JpF0kxQh8GqNRCIqlQo/Hba3txuNRpqmc3Jy6urqUOedO3eWLl1K8ggA4idGjRkFifxCODc3l/tXLrymHEzt3zOPQwCBmIzbHItf0fHjx4V/CYKJRCIGg6GxsXHsTAO+XCbX7/yfP38u0QRGCgQQEMVsNrtcLtLZGTNmNDU1rVmzZjxNAqYqk/T/Lo8PQ0NDDocjKytrog0BgHElOTl5xYoVEhdAgQHGisn1HjPOlJWVWa3WxsbGiTYEAABgajKNZdmJtgEAAACYmnzRe2UAAACArECNAQAAAOQCagwAAAAgF1BjAAAAALmAGgMAAADIBdQYAAAAQC6gxgAAAAByATUGAAAAkAuoMQAAAIBcQI0BAAAA5OJ/rTOxSTmsq30AAAAASUVORK5CYII=)

HTTP POST data:

![](data:image/png;base64, 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)

Research’s Comment:

![](data:image/png;base64, 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)

Screenshot: sindjustica.com vulnerability

Mirror: Click here to view the mirror

Coordinated Disclosure Timeline

Vulnerability Reported:	6 May, 2020 19:59 GMT
Vulnerability Verified:	6 May, 2020 20:14 GMT
Website Operator Notified:	6 May, 2020 20:14 GMT
a. Using the ISO 29147 guidelines
—	—
b. Using publicly available security contacts
c. Using Open Bug Bounty notification framework
d. Using security contacts provided by the researcher
Public Report Published
[without any technical details]:	6 May, 2020 20:14 GMT

JSON