Lucene search

K
openbugbountyBroly157OBB:1159800
HistoryMay 13, 2020 - 7:13 a.m.

worldwide.deltafaucet.com Cross Site Scripting vulnerability

2020-05-1307:13:00
Broly157
www.openbugbounty.org
5

Open Bug Bounty ID: OBB-1159800

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:

&nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence;
&nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence.

Affected Website: worldwide.deltafaucet.com
Open Bug Bounty Program: Create your bounty program now. It’s open and free.
Vulnerable Application: Custom Code
Vulnerability Type: XSS (Cross Site Scripting) / CWE-79
CVSSv3 Score: 6.1 [CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N]
Disclosure Standard: Coordinated Disclosure based on ISO 29147 guidelines
Discovered and Reported by: Broly157
Remediation Guide: OWASP XSS Prevention Cheat Sheet
Export Vulnerability Data: Bugzilla Vulnerability Data
JIRA Vulnerability Data [ Configuration ]
Mantis Vulnerability Data
Splunk Vulnerability Data
XML Vulnerability Data [ XSD ]

Vulnerable URL:

![](data:image/png;base64, iVBORw0KGgoAAAANSUhEUgAAAiEAAABLCAIAAAAphcDFAAAACXBIWXMAAA7EAAAOxAGVKw4bAAAZlUlEQVR4nO2dfUwcx/n41+Swj/NxhvNxxpiYF7UHsiihKaW4uTiUIsdCyLq4hLiUOoQg7FiUUERShyLqUIu4hFgOjRCNnMipIseN0hSh1CUWsqqTc3KoTc9XRDEhp/Ppcqb0eLF9tjE92O8f88v81jsze3tvcITn89fN7OzM8zzzzM7t7O4z63ie5wAAAAAgAsSstAAAAADANxaYYwAAAIBIAXMMAAAAEClgjgEAAAAiBcwxAAAAQKSAOQYAAACIFNE7x2RkZFy9epWVBAAM+EakAQsHClgME6VzzL/+9a+lpaVHHnmEmgQADPhGpAELBwpYTIifOeb69evx8fHUQzdv3nzttddYyRDp7+/fu3cvKxk6Enpdv349MTFxGWoI4kRRo/Jt/stf/jIuLu69994LQir5hNcHZBJe31gRFaIHqvpUCwft5MuMzA4VFpMY2jJBFrt+/fq6B8nIyAil2tUKL4nD4VCr1XIOSZQMgoKCgvPnz7OSoSOtV0JCgpxK5ufnQ6wh0BODs7nH44mJibFarT6fLwip5BNeH5BJeH1jRVSIHqjqUy0ctJMvMzI7VFSMNbRlgiyG6pz/mmPHju3duzeUalcp0bhWduPGjfHx8aKiImoyetiwYcNKiyALr9erUqkeeeSRhx56aKVlCTNR6xvfGNamhUMZ2thiSqXSaDRu+JozZ85UV1eHT8ZVg6w55s0338zIyNi8efPPf/7zmzdvchx38+bN9PR0r9e7bt269957T5g8ceJEfHz866+/vmXLlsTExGefffbevXuonn/84x+PP/54fHz8tm3bfvKTn/z73/+mNtff37979+7Y2FhR8qmnnnr99ddR5tWrVzds2ICE4Tju4MGDL730Esdxd+7cOXjwYFJS0sMPP/zqq68uLi6iO9/XXnstKSlp69at77zzDtniV1999eSTT8bHx2dlZZ05cwZlSjd38OBB4Q01tQaO4+7fv//888/Hx8enpaX95je/WVxclNO0nBNFXYDMu3Pnzri4uKSkpKeffvqrr77iOG56elpYjFpGtDggXAZZXFx85ZVXtmzZsnHjxqeffnp6epolGymPEGo9ZGdhYd54442MjIyNGzc+88wz09PTL730UlJS0ubNm5977rk7d+5QXYVsQkIvjuaNpAohSkgaiuqN1HHBEh7lk+OLlS+thVASag8KLczyVWr91B6XVio4k4pOT0xM/NnPfka9TLHGiKiYUEi/DiBsTmSxLVu2/O1vf8PONjU1VVZWxq09/M8xXq/XarVaLJahoSG3233kyBGO4zZt2jQ2NobuBKuqqoTJp556yuv1Dg0NXb58+fLly8PDw52dnaiqsrKy6upqp9N58eJFo9GoVCqpLbIexpSVlQ0ODqLMTz75ZGlpaWBgACUHBwdLS0s5jmtoaHC73cPDwwMDA/39/T09PUiFsbGxkZGR06dPG41GssX6+nqNRjM6Onru3Dk8eKSb+9GPfuS3Bo7j2tvb7969a7PZBgYGzGZzb2+vnKblnCjqAo7jhoeH6+rqJicnR0ZGUlNT6+vrOY7bvHmzsBi1jASdnZ2Dg4ODg4Pj4+MpKSmjo6Ms2Uh5/NZD7Szua5e7ePGi1Wp1u93Z2dkej8dms126dMnhcLS0tOBqha5CbUIC0htJFUKUkGoo0htljgsMa3yx8iW0EEpC7UGhhVm+Sq0/0O4IxaTodJvNhi5TTqcTlZc5RiRcV8J0ZHOkxTCnT5+urKzE/5vXFtJLaQ6Hg+O4W7duoaTFYsnMzMSHqM8G0ClOpxPlf/zxx/n5+TzPz8zMKBQK6kKn0+lMT09Hv71er1qtnpmZIZNut1ulUqEaCgoKmpqaKisrUYsajWZhYcHn86nVarvdjs7t7+8vLCxE8uAKSeF9Pp9SqRQKjBaapZubmJjwWwPP8zqdzuv1ot9Wq7WgoEAoRqAnyn8eMzExkZycLF0MlyGrxWLo9frh4WHRiSylJOQh66F2Fv+1/8zNzaH8ixcvxsTE3L17FyUtFsu3vvUt9FvkKmQTEnqxvFHkGCFKSBqK9EY5kgiFZ40vVr60FhLjQmRhlq+y6qd6jrRSwZmUJy5TFy9eZF2mhLDGCP4tbTpqcyKfRMzPzyckJJDWWCMo/E5CarUa3zmmpKTMzMz4PUWpVD788MPod3Z2ttPp5DguMTGxvLy8sLCwuLg4JSUlPz//iSeewNVaLBb0+/z58wUFBXhNQ5jcunWrwWCwWCw7duxwu91tbW0Gg2FxcXFwcLCkpCQ2NvbGjRsLCwv45Y3s7GzkDWq1WuIdmKmpKY7jhAKjH9LNKRQKvzXMzs56PJ709HSUXFpaEp4VyolU/vnPf7788sujo6MLCwtLS0tLS0vBlcHcvHlzZmYmNzdXmBmEbNR6pqamqJ3FcZxard60aRP6nZqaqtFo4uLiUDIlJcXj8aDfQt+gNiGBhDeGS0KWoUTeKEcSEdTxxcqX1kL63TChhVm+Sq0/0O7gQjMp9+BlKjU1lXWZCsj/pU1HbU50+UL09fVt3779u9/9rixDfOPwf+UKIx988MGVK1dGRkbcbndTU9MPf/jD3//+9xzHPfTQQ1u3bkVlpN9aLi0tHRwctNvtZWVlmzZtysvLM5vNeKEs7ITY3Pz8fExMzOXLl/FIiImR9QAsuBNNJlNtbW1vb69SqXS5XHv27AmujAjRmwJBKxX2Nw7IRYmAmmB5Y7igGmphYWH5JQmaEN8LD3uPB+17mCD8PyBYC2U1NTXhbWg1IX2bI7HaIHOtrK+vD92zi7BarampqaJMn8+n0+nwzakoyfO8xWIpKCjYu3fvuXPneJ7v6elpaGhITk52u908496WerMssVbW19eHdZRoTmYNarVa4h450BMl1sqmpqYUCgU+ZLVayZ5ilbl161ZMTIzw3l+4Vma1WkVisJSSXisT1SOxEMFyOWGS9A2yCQm9RGBvlLlWJkdCnmYov6/SYklYwrPGFytfphakeORgpPqqxFoZ6TkSSgVtUunTAx0jvLy1MmpzpE/yPO9yuZRK5dTUFL9WCX6O8Xq9CoVifHxclES+Xl5e7nK5RkZG8vLyjh49yvP86Ojonj17Lly44PF4nE5nbW1tWVkZrhmtR5vN5pycHJwpSiL0er1er0flXS6XRqPJy8vDR2tra/fu3et0OkdGRh599NHu7m7qWLp165ZCoRgbG0OfjJhMJqHAQv9mNSeqllXDoUOHCgsL0V/Uzs7O9vZ2/sG37wM6USS2qAv0en1PT8/c3Nz4+LjJZKKOH1aZgoKC2traycnJ8fFxo9GI8zs6OgoKCmw2m8vlqq+vN5vNLNlIeYRqUushO4s0LOtyQ/oGtQmWXixvFKkQioRUQ5HeKDEuqMKzxhcrX6YWZA+SFmb5KrV+andIKBW0SaVPlzlGhMWEtQXkANTr1fHjx00mE7+GCX6O4Xn+6NGjKpXq9OnTwuQbb7yhVquPHz+u1+sTEhIOHDiAnt0tLCwcPXrUYDCsX79er9dXVVVNTk6KWmlubm5pacH1i5KIysrK8vJynMzPzxeW8Xq9dXV1Op0uNTX16NGjPp+P9c/xyJEjWHiXy7V79261Wm0wGLq6uoQ6spoTVcuqYX5+vrGxMTU1VaVSlZaW2u32oE8kxRZ1gdlszs/PVyqVycnJTU1N1DmGVWZiYqK4uFitVu/YsaO7uxvn+3y+l19+WafTKZVKk8nk8XgkZBPKI1KTWg/ZWaRhWZcb0jeoTbD0kvBGoUlDkVBO70tLQhUe1UCOL1a+TC3IHiQtzPJVav3U7pBWKjiT+j1dzhjhGa4bkANQr1fZ2dl9fX2kndcOfuaYIPC7GiCBwWC4dOkSKwkAmDXrG6zxFcq4o7JmLRw0YDEqy/rM3y/Xrl2TSAIABnwj0oCFAwUsRiUaY8kAq51VFNg8SkSNEjFERKdU0cnVq1dfeOEFMh9sCHMMEGZWUWDzKBE1SsQQEZ1SRS3V1dX4wx0M2JCTE9ufDE8tHbM6LS3NaDT+4Q9/EFV1+/btrVu3RuJ2Uv4GBEHUNjs7+9xzzyUlJW3btu1Xv/rV//73P7L8NybIOdY9FKXCEmxfZnz1EEPxC0XFVUlsoBB61He/YvglLS3t9u3b8vOXRypMuEy0KoYV9o3p6WmbzdbY2CgqEPZNSVYj/u9jROGp0be71EzEtWvXhoeHDxw4IKqnu7u7qqoqKysrvApIMzc319HREUoN1dXVCwsLVqv1woULFoulra0tXLItM6GbQiZhGVdpaWn4e34JQlRKKCquStT0MtgtOq9E0SlVVIF9A4U2J6M1gw05v9/54/DUKHnmzJljx45RM/Ep3d3ddXV1OA4E4vbt22fPnsUBY1YL9+7dGx4eHhsb27hxI8dxJ06cqKys/AbvYaVQKAwGg/BHoIQxFHykt06QEHU5d22IzuD50SnV6gJs+P+Q/wra0NCQTqdbWFiQyJybm9NqtfgFf0xHRwf+pEO6CaPRqFarU1JS9u3bNzo6ysoUgt7aPHnyZHp6ularraqqQsH15ubmsJr4tfeurq709HSVSlVRUeHxeJqbm3U6nVarra6uRrH2JN4BPXPmzK5du/gHPxTo6OiQ/lCA53mfz3fkyBG9Xq9SqcrLyz0ej0RwQDlC8jw/Pz9fU1OjVqu3b9/e1tYmfHMfnZ6QkFBZWUk1hd+OEDIwMCC/QG9vb0VFBU5S+45ljY6ODp1Ol5ycfOrUKfK7687OTtGXH6RSQYsqrAp94EXmkx/9ULvArwwSYgwNDRUWFiqVSp1Oh752JMv7rZC0eUVFxbFjx3CBwsJCZC63211aWqpWq9PT00WfhQmlkvhGhPQ0MqomdURQNWUNKyosryB9SY4Kfi8I0u4n9BmqDdcyAcwxhw8fbmhokM7s6uo6cOCAqIzX69XpdJmZmSkpKS0tLRK7Mer1+lOnTs3MzNjt9hMnTqAPrKiZQtAXztXV1W63G33hdejQIXQIh+xGH2NyHFdVVeVyudA3xjqdDp2F/m4gRVhzzNjYWEpKytDQEP/1B89Op3NiYiInJwcPhpqamrKyMtFXwTzPd3R05Ofno2+eGxoazGazxBwjR0ie51taWvbv32+320dHR4uKit566y18+oEDB1B5o9F4+PBh0hQ8z+sIWJ2SnJxcXFx8+fJl8tDQ0FBxcTEOXsvzfGlp6fvvvy/doVRrILEnJycHBgbGxsZEcwzHcUKD4y/YRUqFIiquym63C7tG5ELCQ9QukJDBrxi9vb3vvvvu3Nzc5ORkY2Mj/j48IL1Im3/00Uc4npPb7VYqlWg+2Ldvn8lkmpycnJiYyM3NFV7ThVJRvZrlaSITsUYEVVPWsKL6KssrSF+SVkHOBcGv+4l8hrThWkbuHEMNT01mZmZmWq1W0Xe2XV1d6ENf1EPYz0RQg5xL7AiAccjbgMAhL344dY5xuVyZmZlnz57lAw9yzgcSdl6mkHzIQc5dBCzzer3ejo4OrVZbUVGBY3KMj49XVFRotdqOjg4shiiwOavvqNbgHowzT3YcGbWeVCpoUYVVkV1DRrJCULuAKoN8MTDCyPPy9aLa/O7duxqNBhmwp6cH7fiL3Bi7q3BfCVFIf1bMLqqniSKesUYEqanEPhdUX2V5BelLIe7RIMf9yIuGRM+uNeTOMWfPns3NzZXO/Pjjj4uLi3kiloPBYMA91N/fj3uI/BO9f//+vLy8pqamrq6uv//97xKZQiQiSUhcIFjxKqhzTGFhIZ4a0T9BfGh0dBTvN7N+/XqcPz4+jq4Rc3NzCoVCdPcmvVbmV0gUSxxbT6vV6vV6+aYIgpmZGZPJhEMKKhQKk8mExycCOwCG7Ds51uCJjhMZHCnLUio4UQOdY1hdQJVBphjDw8MlJSUpKSmoQtFikRy9ePYgQg5cUlKC/lyL3BW7sUgqllfLcWDWuVRNWcOKBcsrSJcIVAVSI7/uRzZKOtiaRe73MdTw1KLM7u5u8u292dlZu92Ot50wGAxutxv9tgpAOR988MGpU6dyc3MXFhaampp+8YtfsDKXkxs3bthsthDbDW+ccxzkHFnPZrNhG8okiUCi8JdffonCGra3t6Oc9vZ2s9l8+PDhL7/8Ehcj36Jh9V3Yo76HLmqgSHQBKYNMMUwm065du8xms9VqPXfuXBB6cQybV1RU9PX1zc7ODg0N+VV8Gd6GktCUJCBfjRLgjbL/j5yJiBqemszkOE6r1aI/JjExMej/HRqK+Ea1r6+Per9MQg3+T82M9H2Mz+cTPgQKNMg5H0jYefnBAdUhBDnnA1krO3TokFqtbmpqwmENER6Pp7GxUa1Wo6df1MDmQnDfkdbwex/DMXaLEJ0YiqhBrJVRu4Alg18xJCLPy9SLBNt8fn5eq9WePHly37596BByY4fDgZLCJV9RSH/WQpPf+xjWuVRNJfa5kLNWJtzjgBy/AalAauTX/URV+R0LawpZcww1PDWZiT3g0qVLGo0Ge4PJZNqzZ4/D4bDZbDt27Hj33XeprVCDnEtEPseLzhK+wgrZzbNdShQ/X9QWIqAg53wgYeflzzEhBjmXT1VVFb4SkTgcjqqqKp4W2JzVd6Q15Mwx1Kj1IqWCFpV/cHMK0TMe3ITIN6hdIC2DtBisyPMy9eIldwqorKzUaDQffvghPrG8vNxkMjkcjpGREfzMn5QqoPj2IhOxRgRVU4ktNqhaU72Cunwayh4NctzP6XQK19OoDrZmkTXHUMNTS8SsFvWWx+OprKzUarXbt28/fvw4qxVqkHNW5HP5NyisaPMSl29R/HxRST7AIOd8IGHn5QsZYpDzsEMGNmf1HWkNv3OMmhG1PjilqDHY+Qc3pyDzURNC35DY4yA4MSQiz8tEYqeAvr4+tVotNN3k5GRZWRl6d/n48eOsAPWBbnAgNBFrRFA1ldhig4TlFdQ5JpQ9GuS436lTp5RKJf6vw3KwtUn4Y/sDa5PIBTYP8W0FkiiJwR4lYiDGxsbQo+yokkqCsHtFiA01NDTgh/yrxYbLQ3TF9gdWL6sosHmUiBolYiCsVmtmZiYXZVKtIrq6uvBLH2BDIass7nJGRsaVK1d++tOf/uc//1lpWQBgdfPb3/72nXfe+e9///v555+3tLQcOnRopSVaxcTGxn7/+99faSmikdU0x6BA2d/73vfWr1/f3Ny80uIAwOqmqKiop6cnNTW1qqqqoaHh2WefXWmJgG8gfuaYTz/9dNOmTdPT0zjnscce+/Wvf81x3O3bt1988cW0tLS4uLisrKzf/e53i4uLEvkcbaeAdevWvfnmm6JDsbGx3/nOd/70pz+JhMGvnDc2Ng4ODkqIHZYY9UCUEPao9QDi8ccfv3Llyv3797/44osXX3xxpcUJjGXzCnC/EPEzxzz55JNGoxF/9vWXv/zF4XC0tLRwHFdTU+N0Os+fP+90Ont6egYGBoaHhyXyEWrBpgCI+vp60SG3293a2lpfX//Xv/5VKAyeY7RardfrDZ8RAAAAgMjg962AsbExlUplt9t9Pp/BYECvJN69e1ehUJBxLFj5CIk3NMhDvb29paWlOOl2uxMSElCAZ79verhcrkcffRT9QFGkAAAAgOXH//OYrKysurq6I0eOvP322xqNBi3aLi0tcRynUIhfS2PlB0FBQcHIyAhO9vf37969OzY2VlTs008/Jc/dtm3blStX0I/PP/88dGEAAACAIJD1zL+tre3ChQstLS3d3d0oZ+PGjaWlpfv37//ss8/u3LmDS7Lyg0Cr1d66dQsnWfF/qqurf/zjH6MZBQAAAIgqZM0xiYmJJSUlGo1m586dOPP999/PycmpqalJSEj49re//eqrr6Jn+6x8hNfrFca2kxlo8s6dO2azubS0lDw0MTFRUlKye/fuZ5555osvvpBTGwAAALBMyFlQs9lsCQkJOTk5vb295NH5+XmLxVJYWNja2iqd73A4VCqVMLYd3l+BGk2EGmycWpgMpQ4AAACsOLLuYxoaGpqamt56663W1tbZ2VnR0Q0bNuzcubO7u/vDDz/0mx8TE7NNgMSLxTMzMxqNBv2WDpRNDaUOAAAArDj+55g///nPdru9ubn5iSeeMBqNbW1tKF/0uAVtRiuRHyhDQ0M5OTkcxy0uLn7yySesOeaFF17Iy8tLTk4eHx9/5ZVXgmgIAAAAiBB+XgC7d+9ec3NzR0dHXFwcx3GdnZ15eXl1dXXr16/ftWvXsWPHysrKVCqVzWY7fPhwbW3ttWvXqPnCOu/fv/+ABAoF3rEKHfJ6vYODg62tradPn+Y4zmKxJCcnZ2Rk4FN8Ph9+dc3r9Y6MjKSlpYVoCAAAACD8SC+ltbe3i74vaWxsLCoq4nn+3LlzRUVFGo1GpVLl5ua+/fbbqAArn/96JwYRJ0+eFB1SKBQ7duw4e/YsOosMlP3RRx+RGz8DAAAA0cY6nueXbT4LjqysrD/+8Y8/+MEPUPL+/fvZ2dmtra3PP//8ygoGAAAASLMK5hiSzz777LHHHltpKQAAAAA/rMo5BgAAAFgVrKbY/gAAAMDqAuYYAAAAIFLAHAMAAABECphjAAAAgEgBcwwAAAAQKWCOAQAAACIFzDEAAABApIA5BgAAAIgUMMcAAAAAkQLmGAAAACBSwBwDAAAARAqYYwAAAIBIAXMMAAAAEClgjgEAAAAiBcwxAAAAQKSAOQYAAACIFDDHAAAAAJEC5hgAAAAgUsAcAwAAAEQKmGMAAACASAFzDAAAABApYI4BAAAAIsX/AQ8Wu8+R5uTwAAAAAElFTkSuQmCC)

Research’s Comment:

![](data:image/png;base64, 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)

Screenshot: worldwide.deltafaucet.com  vulnerability

Mirror: Click here to view the mirror

Coordinated Disclosure Timeline

Vulnerability Reported: 13 May, 2020 07:13 GMT
Vulnerability Verified: 15 May, 2020 09:19 GMT
Website Operator Notified: 15 May, 2020 09:19 GMT
a. Using the ISO 29147 guidelines
b. Using publicly available security contacts
c. Using Open Bug Bounty notification framework
d. Using security contacts provided by the researcher
Public Report Published
[without any technical details]: 15 May, 2020 09:19 GMT