Lucene search

K
openbugbountyYashodarOBB:1159547
HistoryMay 12, 2020 - 12:33 p.m.

impic.pt Cross Site Scripting vulnerability

2020-05-1212:33:00
Yashodar
www.openbugbounty.org
6

Open Bug Bounty ID: OBB-1159547

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:

&nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence;
&nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence.

Affected Website: impic.pt
Open Bug Bounty Program: Create your bounty program now. It’s open and free.
Vulnerable Application: Custom Code
Vulnerability Type: XSS (Cross Site Scripting) / CWE-79
CVSSv3 Score: 6.1 [CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N]
Disclosure Standard: Coordinated Disclosure based on ISO 29147 guidelines
Discovered and Reported by: Yashodar
Remediation Guide: OWASP XSS Prevention Cheat Sheet
Export Vulnerability Data: Bugzilla Vulnerability Data
JIRA Vulnerability Data [ Configuration ]
Mantis Vulnerability Data
Splunk Vulnerability Data
XML Vulnerability Data [ XSD ]

Vulnerable URL:

![](data:image/png;base64, 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)

Research’s Comment:

![](data:image/png;base64, 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)

Screenshot: impic.pt  vulnerability

Mirror: Click here to view the mirror

Coordinated Disclosure Timeline

Vulnerability Reported: 12 May, 2020 12:33 GMT
Vulnerability Verified: 12 May, 2020 12:39 GMT
Website Operator Notified: 12 May, 2020 12:39 GMT
a. Using the ISO 29147 guidelines
b. Using publicly available security contacts
c. Using Open Bug Bounty notification framework
d. Using security contacts provided by the researcher
Public Report Published
[without any technical details]: 12 May, 2020 12:39 GMT