logo
DATABASE RESOURCES PRICING ABOUT US

nyuskirball.org Cross Site Scripting vulnerability

Description

Open Bug Bounty ID: OBB-1164575 Following coordinated and responsible vulnerability disclosure guidelines of the **[ISO 29147](<https://www.iso.org/standard/45170.html>)** standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence. Affected Website:| **[nyuskirball.org](<https://nyuskirball.org>) ** ---|--- Open Bug Bounty Program:| **Create your bounty program now**. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| **[XSS (Cross Site Scripting)](<https://www.owasp.org/index.php/Cross-site_Scripting_\(XSS\)>)** / CWE-79 CVSSv3 Score:| 6.1 [CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N] Disclosure Standard:| Coordinated Disclosure based on **[ISO 29147](<https://www.iso.org/standard/45170.html>)** guidelines Discovered and Reported by:| **kun-fly ** Remediation Guide:| **[OWASP XSS Prevention Cheat Sheet](<https://github.com/OWASP/CheatSheetSeries/blob/master/cheatsheets/Cross_Site_Scripting_Prevention_Cheat_Sheet.md>)** Export Vulnerability Data:| Bugzilla Vulnerability Data JIRA Vulnerability Data [ Configuration ] Mantis Vulnerability Data Splunk Vulnerability Data XML Vulnerability Data [ XSD ] Vulnerable URL: ![](data:image/png;base64, iVBORw0KGgoAAAANSUhEUgAAAiEAAAA3CAIAAABVZQ1/AAAACXBIWXMAAA7EAAAOxAGVKw4bAAARj0lEQVR4nO2df0xT1xfAn1BqxVeEWipQnJRlaBhhjDCGE5nRRR0jpkPFbGNKGGHVICOGGFDjGEZkTI2iI/6hCbrNmcURRghzjpmlY8QfDCvrGOuQ1KYCw4qDPVmthff94+Z78/Z+ttUC4vn81fvuveeec+59PX3n3fc6i6ZpAgAAAAD8QMBUKwAAAADMWCDGAAAAAP4CYgwAAADgLyDGAAAAAP4CYgwAAADgLyDGAAAAAP5i+sYYnU5348YNoSLgCdPTadNTq6eZGzdubN26daq1AGYm0zTG/PrrrxMTEy+88AJvEfCE6em06anVU05eXl5MTMxUawHMTCRizK1bt5RKJW/VyMjIgQMHhIqPSFNT07p164SK/kDIUhEPSNaKNPaqo29MgtNYeGIU0gq3vHXrVlhY2KRox2bLli0vMVi2bJkPQh7jPPrmCp8VwCfs3bt3u7q6SkpKeKUdO3bs2WefnT179osvvvjtt9+yhp71fwIDA3U63b59+8bHx1lVmKNHj6KqwMDAn376iSUK287qu3DhwvLy8ocPHwrZy/LbsWPHdDrd3LlzX3755R9++IFXW65YEUvFR5Q0h+uHWbNmKZXK33//Hbf/4osvFi9ejFw3A6FFsVqtJEl6UiXS0gdSU1MvXrwoVPQHIvo7nU4feok3frzu4mUSnMbCE6OQVril1WoNDQ2dFO3YpKSkiBQ95DHOo2+u8FkB5hQILcva2tqYmJjW1tahoaGzZ8+qVCqj0ciS4HQ6nU7n2NiYyWRKTU2trKxkVWHcbjeqIggiNjaWoihe21lizWbzK6+8smfPHiF7mX1ra2tjY2MvXbrkcDjOnz+vVqvb2to8EStiqfiIkuagEXt6ekJDQ7ErSkpKNm/ejNsnJibW19d7MmtPItMxxvT394eGhrpcLt6in/BN/2kbYybHaSwkjcJa2e325ORkmqbtdntqaupkKfgfIMZwYwyeF0RUVNSlS5dw8ciRI1lZWSJDt7W1xcfHi2tltVqDg4OTk5MNBgPzICvGMLu0t7cvWbJEqJbZl6XwiRMnsMLiYkUslYwx4ubwHunv7ydJ0mq10jTd0tISGxuLAvCMxKP7MUePHtXpdPPnz3/33XdHRkYIghgZGYmJiaEoatasWadPn2YWDx8+rFQqP/nkkwULFoSFhW3ZsuXff/9Fcq5du7Z8+XKlUqnVatevX8+8WmTS1NS0evXqoKAgVhFdtB46dEin04WFhb3zzjtIGYIgPv300zVr1mAJu3fvXr9+PfMKl3VBLa7Jb7/9Nn/+fHT9y8zqKJXKAwcOhIeHR0ZGnjp1Crf/+OOPeY1dunTpnDlzwsPDN27cePv2bU9cTRDE/fv333///fDw8IULF3700Uc4+cAdfWBg4I033lAqlTqd7tChQ0wDmT4UMvbBgwfvvfeeUqlctGjRhx9+iAbiVZt39PHx8fLy8gULFsydO3fjxo13795FYrmrhauVVqv95ZdfCILQarVXrlxBtd999524Z5gNuEZt2rRp//79uMHSpUtPnz4t7iVv/c+79iT7CnmVIIjbt2+vWbNGqVQuXrz47Nmz4op5sqK4c8o7d8wT9uuvv8bd8bygNv39/enp6bg2IyOju7tbREOFQuF2u8WtIAgiICDgzJkz9fX133//vWRjgiDkcrnL5ZJsxlU4Pz//+PHjkmJ9sJSJt+YQBBEZGZmXl1dTU0MQRHV1dVlZWWBgoId9nzikYwxFUSaTqb29/erVq/39/WVlZQRBzJs3r6enB1175ubmMotvvvkmRVFXr17t6Ojo6Ojo7OxEriQIIisrKy8vz2aztbW1paenKxQK3hFFbsZQFNXV1YWUsdlsu3btQsf1er3RaPznn39wl9dff13EKBFNRkZGsrOzq6urly9fznVFT0+P2Wyur6/HK5KiqI7/wzS2s7OzsLBwcHDQbDZHR0cXFRVJuhpRXFzc39/f2dl54cKFpqamuro6odGLiorkcnlvb29ra+uZM2eEfChkbGVl5djYWFdX14ULF4xG44kTJ0TU5o5eU1PT2tra2tpqsViioqLQOcm7Wni14pKXl7dq1Sr8Hcfk2rVrq1atysvLw0e4RuXk5DQ2NqLagYEBk8mk1+vFveSt/3nXnid9hbxaVFQUEhLS3d3d0tLCjDHhHESEMOGdU+7csU5YXj9QFKVQKPBPPYIgQkJCRkdHhfx2586dPXv2IJ9L8vzzz1dUVOTn5/OGaib37t3bu3dvQUGBpEyuwkFBQYsWLZIU662lXDw3B1NWVnb27NlvvvnGarUyF/YMRPwyB2UbR0dHUbG9vT02NhZX8ebKUBebzYaONzQ0oCzE8PCwTCbjvbdhs9liYmLQZ4qiSJIcHh7mFlnKtLW1YWVomk5LSzt//jzWxGKxsNTD16q8mmD9MzMzt23bJmQXVozpH66xLHp7eyMiIjzJlbndbpIk+/r6ULGpqSktLY13dLfbrVAocMuGhgZsINNpIm5Xq9U4iYyS6bxqC9mu0Wg6Ozu53uBdLTRnZrlQFFVVVaVSqXJyciwWCzposVhycnJUKlVVVRXWlteosbGxkJAQNBd1dXXr1q0T9xJvrkzc/9y1x5xHob5CXkW6MRcP1s3OQUgIayFx55R37uj/Lmzepcg93tfXx0z4IMlqtVqtVqtUKoVCYTAY0KQwqxBFRUUssW63Oy0tDd2W4N7hwGIDAgLWrl0rohXuy6wqLS1FEpjfV0JixS2VzJWJm8PtgjEYDAqFoq6ujuv8mYRMMgiRJImTTlFRUcPDw5JdFArFwoUL0eclS5bYbDaCIMLCwjZs2JCWlrZy5cqoqKiUlJRXX30Vi21vb0efL168mJqaihMarCJTmejoaKYyer2+ubl5/fr1zc3NmZmZcrlcSD0RTXbv3n3hwoWTJ08KuYKbaeE1liCI69ev79y5s7u72+VyTUxMTExMSLmNIAhiaGjI5XLpdDosEJ0b3NGHhoYmJiaYLXEV02lCxt67d8/hcOAdqxMTEzKZTERt1ugjIyPDw8OJiYlcFwmtFtZUcpk7d255ebnBYMjPz4+Pj0d7fuLj47Oysvr6+ubNm4db8ho1Z86czMzMxsbG7du3NzQ0oN+GIl7iRdz/QmtPsi+vV4eGhgiCYC4eLEqr1XJ1k1xRQnPKu24lkclkrMQXFogJDg42mUwEQQQEBGg0GmbCB1fhIkt+YGDgmTNnkpKSsrOzk5KSeMUSBNHX11dSUnL06NEPPvjAc4X37NlTUlJit9vXrl0rKdYTSyURMUeIbdu21dfX5+fnezXQE8ekPh/z5Zdfnjx5MjEx0eVy7dixY/v27eh4YGBgZGQk+uzzruXs7OyWlhaCIJqbm7Ozs33QZGxsrKGh4dy5c2VlZZ5f8wqh1+szMjKMRqPJZEKKTRosp/Ea63Q6AwICOjo6TCaTyWTq6upCp59XanuVRPZkKm/evFlUVGQ0GisrK9GRyspKo9G4bdu2mzdvMlvyGoXSZffu3bt69eok79sWx9vFwJsrkxQiNKe+gTJpzN29o6OjISEhzDYBAQFarVar1UZGRrIWA65C8Aa55557rqqqqrCw0OFwCPVdvnx5bW0tzjoGBwc7nU7mNl+KolAAYyo8b948rVYrl8uZsU1IrLilIiN6aI4QISEhMpls9uzZnjR+ghG/zOEmxIQuIYVyZY2NjbzpI5PJFB0dzTrodrvVajXONrCKIsogEhISWltbQ0NDR0dHR0dHAwICmMkNoU07SBOr1SqTybq7u2mazsrK4l7a86YUhIwdGhqSyWTMIUJDQx8xV8ZqjzItaGsKzci0sJzGayz6TJIkK9nFq7aQthqNxmQysbwhNEHiWiEMBgNJkjt27HA4HMzjDoejpKSEJEnm1h1eo5xOp0qlOnLkSHZ2Nh6X10u097kyXtM8yZUJeZWVK2tsbBTJlXk4Ndw5lUyFiewBY+22qq2tFd9X5lvVihUr0tLSRHJTly9fZiZdNRoN3pFM03RdXR3OekVFRf3444+46uDBgyIJMaZYcUtFRpQ0Bzfjfv9MwgMM0wHfYwxFUTKZDOfNcRF97W7YsMFut5vN5qSkpIqKCpqmu7u7165di7au22y2goIC5iyiNK7RaExISMAHWUXJGLN3797ExEQsNjU1taCgYHBw0GKxpKen48a8mjCF9/T0KBSKrq4u2rMYwzWWpmmNRlNXV/f3339bLBa9Xo8in0wm6+npcbvdzM9MD9A0XVBQsG7dOpvNZjabk5OTa2trhUbfsGGDXq+3Wq1mszkxMREZyHKaiNsNBkNaWprZbO7v76+pqUFPNnDVFhq9qqoqNTW1q6vLbrejiw+RCWJpxUtubi4OBlysVmtubq6kUW+//XZISMhXX30l7iVaeO+yJ/7HprHmkbevkFdpmtbr9czFI753mVcISwHunAp9keET1mazKRQK3hHxUyMOh+PcuXO8z8fwdrSKPh/DvflBkiTv8zFOp7O7uzsjI4N5i/T48eNxcXFGoxE9BKNSqXAAwM/HDA0Nff755yqVqr293ROx4paKjChpDm4GMYYf8a/1ioqK4OBg/PQQKh46dIgkyerqao1GExoaunnz5rGxMZqmXS5XRUVFXFycXC7XaDS5ubmDg4OsUUpLS3ft2oXls4qSMQZlBrA+vb29K1euJEkyPj6+trYWN+bVhCW8uLg4IyOD9iDGkCRZU1PDMpamaaPRmJKSolAoIiIiduzYgUYvKyvDHmN+ZgqnKKqwsFCtVkdHR1dUVAidmTRNDw4OZmVlkSQZExNTXV2NhmA5TcTt6Fmw6Ojo4ODgzMxM9AOcV23e0d1u986dO9VqtUKh0Ov1DodDZIJYWj0iIkY1NjaSJIlnQchLNE2n/BfmjydJ/zNNY84jb19awKs0Tdvt9tWrV5MkGRcXd/DgQfEYIySEqQB3TkW+yNAJe/LkSYVCgX8sskDf2nK5PCkpqaWlhVklHmO4KZMjR44I9Tpx4gTrnj9Go9EUFhbihATi8OHDMTExcrk8ISGhoaGBpTCqSk5OZl6aSIoVsVRkRElzcDOIMY+NR3FcXFzc5cuXhYqSoD2IIjuXZjA9PT0ajYb23mmTwzTRCnsJYFJcXLxy5cqp1gKYmXi3d8Lf/PHHHyJFSS5evJienj5V77+aWkwmU2xsLOG90yaHaaIV9hLA5ODBg4+yOwAARPB0X9nDhw/feuutv/76y8P2k//+9pGRkePHj+fk5EzmoFPLvn37Tp06defOnStXruzatctgMEy1RtMR8JIkQUFBL7300lRrAcxMPI0xQUFBcrm8tLTUk8bj4+OT//52fEdkMgedWlasWFFXVxcdHZ2bm1tcXLxly5ap1mg6Al4CgClkFk3TItW3bt1KSEhA72i5fv16ZmbmwMCApND9+/cPDg4eO3bssakJAAAAPIF48QymSqWiKMqTlpP/zyUAAADANEQixshksri4OK8kDgwMWCyWFStW+K4UAAAAMCOQiDHMd32zEHoTO+vN/AAAAMBTi+/vKxN6EzskygAAAACE7zGmt7f3tddeW7169aZNm/7880908P79+0ajMTMz8zGpBwAAADzB+B5j0JvYe3t7XS5XfHw8Oij5/nYAAADg6eGR3u3PfRM7JMoAAAAAjO8xZuvWrUlJSRERERaLpby8nCCI8fHx5uZmiDEAAAAAwov3lbndbuZ/w1EUZTabmX+X3d7eHhERgf8HEAAAAHjK8SLGmEymZ555Bhc/++wzVgNIlAEAAABMPM2VPXjwoLS0tLi4WKQNxBgAAACAicT7ypj8/PPPy5Yt86s2AAAAwEzCixgDAAAAAF7xSHuXAQAAAEAEiDEAAACAv4AYAwAAAPgLiDEAAACAv4AYAwAAAPgLiDEAAACAv4AYAwAAAPgLiDEAAACAv4AYAwAAAPgLiDEAAACAv4AYAwAAAPgLiDEAAACAv4AYAwAAAPgLiDEAAACAv4AYAwAAAPgLiDEAAACAv4AYAwAAAPiL/wHt8ZNkRaxjSwAAAABJRU5ErkJggg==) --- Research's Comment: ![](data:image/png;base64, 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) --- **Screenshot:** ![nyuskirball.org vulnerability](/twimages/screen-1164575.jpg) **Mirror:** [Click here to view the mirror](<http://1164575.openbounty.org/mirror/>) ### Coordinated Disclosure Timeline Vulnerability Reported:| 18 May, 2020 06:38 GMT ---|--- Vulnerability Verified:| 18 May, 2020 06:45 GMT Website Operator Notified:| 18 May, 2020 06:45 GMT a. Using the ISO 29147 guidelines| ![](/images/done.png) ---|--- b. Using publicly available security contacts| ![](/images/done.png) c. Using Open Bug Bounty notification framework| ![](/images/done.png) d. Using security contacts provided by the researcher| ![](/images/done.png) Public Report Published [without any technical details]:| 18 May, 2020 06:45 GMT