Lucene search

K
openbugbountyGh05tPTOBB:1164710
HistoryMay 18, 2020 - 11:20 a.m.

admin.alcottcollegeprep.net Cross Site Scripting vulnerability

2020-05-1811:20:00
Gh05tPT
www.openbugbounty.org
6

Open Bug Bounty ID: OBB-1164710

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:

&nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence;
&nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence.

Affected Website: admin.alcottcollegeprep.net
Open Bug Bounty Program: Create your bounty program now. It’s open and free.
Vulnerable Application: Custom Code
Vulnerability Type: XSS (Cross Site Scripting) / CWE-79
CVSSv3 Score: 6.1 [CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N]
Disclosure Standard: Coordinated Disclosure based on ISO 29147 guidelines
Discovered and Reported by: Gh05tPT
Remediation Guide: OWASP XSS Prevention Cheat Sheet
Export Vulnerability Data: Bugzilla Vulnerability Data
JIRA Vulnerability Data [ Configuration ]
Mantis Vulnerability Data
Splunk Vulnerability Data
XML Vulnerability Data [ XSD ]

Vulnerable URL:

![](data:image/png;base64, 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)

HTTP POST data:

![](data:image/png;base64, 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)

Research’s Comment:

![](data:image/png;base64, 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)

Screenshot: admin.alcottcollegeprep.net  vulnerability

Mirror: Click here to view the mirror

Coordinated Disclosure Timeline

Vulnerability Reported: 18 May, 2020 11:20 GMT
Vulnerability Verified: 18 May, 2020 11:35 GMT
Website Operator Notified: 18 May, 2020 11:35 GMT
a. Using the ISO 29147 guidelines
b. Using publicly available security contacts
c. Using Open Bug Bounty notification framework
d. Using security contacts provided by the researcher
Public Report Published
[without any technical details]: 18 May, 2020 11:35 GMT