Lucene search

K
openbugbountyHowardpottsOBB:1196730
HistoryJun 14, 2020 - 2:24 p.m.

cntraveler.com Cross Site Scripting vulnerability OBB-1196730

2020-06-1414:24:00
howardpotts
www.openbugbounty.org
5

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:

&nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence;
&nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence.

Affected Website: cntraveler.com
Open Bug Bounty Program: Create your bounty program now. It’s open and free.
Vulnerable Application: Custom Code
Vulnerability Type: XSS (Cross Site Scripting) / CWE-79
CVSSv3 Score: 6.1 [CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N]
Disclosure Standard: Coordinated Disclosure based on ISO 29147 guidelines
Discovered and Reported by: howardpotts
Remediation Guide: OWASP XSS Prevention Cheat Sheet
Export Vulnerability Data: Bugzilla Vulnerability Data
JIRA Vulnerability Data [ Configuration ]
Mantis Vulnerability Data
Splunk Vulnerability Data
XML Vulnerability Data [ XSD ]

Vulnerable URL:

![](data:image/png;base64, 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)

HTTP POST data:

![](data:image/png;base64, iVBORw0KGgoAAAANSUhEUgAAAiEAAABfCAIAAACxwoBIAAAACXBIWXMAAA7EAAAOxAGVKw4bAAAZWUlEQVR4nO2df0wb5/3HL8QBAwcJP+ym2CyQdgShlFkVZXTL2opWKc0QclcaWuYtpEWERiRBVpKRKMpcstEqcdIui2g0USmrojaasgihCmUVTSMH0eZHqeM4hBgaGccYmpofZg51XJfbH8/3e73ePc/5MBwY+Lz+8p2fH5/n8zx3H99j+/NexjAMBQAAAAAyEDPfBgAAAACLFogxAAAAgFxAjAEAAADkAmIMAAAAIBcQYwAAAAC5gBgDAAAAyAXEGAAAAEAuIMYAAAAAchE+xgwMDCzjkJmZuW/fvu+//34OjMPi8/neeuut+eqdx8DAQFJS0nxbAQAAEKVIeo6haToQCAQCgcnJyfb29osXLzY2NsptGYnx8fGmpqb56h0AAACQjtS9sri4uLi4uPj4+Mcee8xsNp89e1ZWswAAAIBFQCTfxyiVykAgQFHUgwcPXn/99aSkpDVr1vz5z3/+4YcfUIHBwcHnn38+MTHxkUceeeedd1JSUijBttLAwAA6L9LO1atXf/Ob3yQlJWk0mpdeeunWrVs+ny8rK8vv9y9btuyf//wnyUJhRZGOrl69+uSTT8bHx6tUqpdffnlwcJC19q233lKpVA8//PD7779PUdQPP/ywb9++hx56KDEx8eWXXx4ZGUHN/u1vf8vOzk5LS/vDH/7g8/kicCkAAMCiZNoxxufzmUymTZs2URTV2Ng4OTlps9nOnz9vsVhOnjyJytTV1SUnJ/f29n7yySenTp0K2yapndLS0qqqKpfL1dnZuWHDBqVSuXLlyt7eXrR3ZzAYKIpSCcBWFOmou7u7pqZmeHjYbrdrtdq6ujpU2O/39/b22u32U6dObdiwgaKow4cPd3R0dHR0OByOjIyMnp4eVMxqtXZ1dV25csXj8TQ0NEzXpQAAAIsWJhxOp5OiqPT/JzY2trKy0u/3MwyTnp6OXjAMY7VaCwsLGYYJhUJKpdLlcqHz586dW7VqFWqHpmlus+g8qZ3R0VGFQhEIBIT2cNtxCyBVJHXEpb+/f/Xq1eyoR0dHue+q1eru7m6hcyYmJtBhV1fX2rVria4EAABYYiikxKGEhASr1UpRVEdHR0NDQ0tLS3x8/NjYmNfrzcrKQmWmpqYUCgVFUffu3aMoKjMzE53Pzc0Vb5zUTkpKSnl5eVFRUXFxcUZGRkFBwdNPPy2srtFohCexFUkdffXVV3v37u3p6QkGg1NTU1NTU6gATdPsbh5FUT6fb3R0ND8/n9cXTdPsHmBGRsbo6Kj4eAEAAJYOkmJMTEwMupVv2bLFbDa3tLTs2LEjEAjExMRcu3YN3alRsQgsEGnno48++vLLL+12u8fjMRqNv/rVr/7+97/zqqPNMS7ffvsttiKpI71eX11dffLkSaVS6Xa7S0pKRKxdvnx5BGMEAABYooR90uHtTZ05c0ar1aKdKJqmeXtHjGCvrLW1Fe2JTUxMxMTEsNtKnZ2d7F4Zth0eVqtVq9UK7RHulZEqYju6d++eQqHgFsbu7CHUarXVahVxDncDEAAAAJj2k0dFRUVycjL6Jt9gMGzfvv3mzZtDQ0NHjhw5dOgQRVHLly8vKSkxGo2Dg4M3b940mUyoYlJSUkFBgdFo/Oabb/r6+rjfjWPbuXXr1gsvvPDZZ5+NjIzcvXv3xIkTOp2Ooqj09PRAINDX14fqagSQKmI7UqlUqamp7733ns/n6+vrY63FUl9fX1NTc+PGjcHBwR07dly6dGm63gMAAFhahI1Cwk/0p0+fzsrKCgaDgUCgvr5eq9UmJCRs2rTpzp07qIDb7d64cWNCQsLatWvNZjP70b6/v7+4uJim6by8vOPHj7Pnse0Eg0GTyZSTkxMbG6tWqw0Gw/DwMCpvMpkSEhJOnTqFNVikIrYji8VSUFCgVCpXr15tNBpFnmNCodDevXvT09OVSqVer/d6vfAcAwAAIMIyhmFkjWEDAwM6nW5sbEzWXgAAAIAoBHJiAgAAAHIBMWbaZGdnX79+nXQIRBswQUuK69evv/HGG/NtBfAjEGOmx40bN6ampn7xi19gD4FoAyZoqVFVVcX+Bw6IBmSPMWvWrBkbG5vdHPjirfGS/8+uFkBbW1tZWRnpMAqRWwohytUN5n6CxB0yNja2detWlUql0Wj+9Kc/TVcjg22cm+5vzpAy1xGvt4gXErfHkZERm81WX1+PbX/uPQZQc/Ycs2bNGq/XOzd98ZL/z64WwIKLMUtcCiHaJqiqqioYDFqt1gsXLnR1dR08eHC+LZoGUq7iuV9v3B79fn9CQkJcXNxcGgCIM3d7ZYtg4oeGhhwOxzPPPIM9BKKNaJug7777rru7+x//+IdGo1m3bt2xY8emq5GhUChycnK4L+aYRXAVA3NM+BgjzIePnmqPHj2anZ2dkpLy+9//npvQfmho6Le//W1SUlJ2dvbRo0d5if1F6pIy/JPAZtTnJf/nHh47diwpKenIkSMPPfRQSkrKli1bvvvuO1SLpAXAo62tbePGjStWrOAdvvjii0eOHEEnr1+/HhcXx9qzbdu2PXv2iBf4+c9/Ll6dZ4ZQYoDkVZ43sIIFWGmDioqKv/71r2yPTz75JFJSCDtH2ALYfsVHRFHU/fv3t23bplKpMjMz33zzTW5TaKSJiYkVFRUjIyN79uxRqVRpaWlbt269f/8+dr6iQe4hPj7+7t27iYmJ6LC/vz8jI4MiaGFg0Wg0X375JXpx+fJldPI///kPqTwLWwbrB+wohOPlXcXCS0kovYG1DeteHhIXkrjYB3JsUlLSunXrPvzwQ/Y8dmlh/UBSJJG+Dqd7W1t8hI8x2Hz4fr/fZrOhhPYul2v//v1s+bq6utjY2P7+/o6Ojg8++EDYIKkuKcM/Nns/KaM+L/k/9/DFF1/0+/1Xrly5du3atWvXuru7Dx8+jGqRtAB4kDbKSktLOzo60MmPP/54amrq/Pnz6LCjo2PTpk3iBfR6vXh1nhkkiQGhV4VSCELBAqy0webNm1tbW1F3Q0NDVqtVr9eLzJH4asH2G3ZEO3fu9Hg83d3d58+fb2tra25uZpuyWq2dnZ1Wq9Xj8eTm5nq9XpvN9sUXXzidTu5S5M5XtMk93L59e/fu3WazmSJrYWBXvpCqqqpnn30WxR4hV69effbZZ6uqqkT8gB2F+KxhLyXhesPaRnIvF4kLSdgjF+TYnp6e9vZ2bowhLS2SH7BIXIdhL5nFT9h/aQrz4fMS2nd2drIJ7VGyMvYP/8LE/iJ1SYn3hRnJxDPqC/97z+2aKzpQUFDAkEUEGIZxuVxZWVnotd/vp2mazfbPPfR4PAkJCaiFwsJCo9FYWVmJekxOTg4Gg+IFXC6XeHWeVWElBrhe5XoDK1jAhZU2mJycRIYxDNPc3FxWVkaaI563sZMYtl/hiEKhEE3T7EJqa2srKipimxofH2dHGhMTMzk5iQ67uroeffRR9Jo7QdEm9+B2u9euXXvmzBmGrIXBSMjFx460qakpNTV18+bNDoeDPe9wODZv3pyamtrU1ITGSPKDcBTY8Ya9lBjB1UeyjYXr3sgWEm+Fs69JjiUtLawfSIk8pK/DsAts0RMmxqBM9ax4TGpqqlqtFkmg4vF4YmNj2bd6enqEMQZbF9sRySrxDC4iMUapVHJtY7t45ZVXdDqd0Wg0m80XL15ky4RCIY/Hg16fO3euuLiYfYt3qNPpLly4MDw8rNVqx8fH1Wp1KBRqaWn53e9+J6VA2Oos4+PjCoUiFApJdAjpCmTp7u5+7rnnMjIykNvZiq+88srx48cZhnnuuedOnz7NSFgMpEnE9is+It5Ccjgc2DuRcOrZQ94EYaeYZDDWJ8JRTHcuWIqKipBv0Uh5yzKydESjo6N6vZ6b4FWhUOj1evY+SPIDdhTCgTDSLiXsXPNsC+veaS0k0gonOZa0tKY1mxLX4bRua4uVMLn9sfnwg8HgDB+eJHaEXgi3CK5duza7vZNEBJYvX/7www+jMuK/KNu0aVNHR8edO3dKS0tXrlyp0+ksFgt3p0u8QNjqPGZRYoAkbbB58+YTJ04YDIYrV66cO3eOkrAYZiL3MOuiCbwJih65h6GhIZvN9vnnn4ctidWtwJb8+uuvDx48aLFYGhsb2ZONjY1ms3n79u2NjY2PPPIIOin0w1/+8pcIRiEdoW1h3TtbuiERMLt+mMeBRBFho5AwH75IDEfPp06nEx1i98pIdUkZ/rF7ZZE9x1CcB/zW1lb2AZ8LVwuAJRQKpaens8/XvEOGYbq6ugoLC8vKytrb2xmGaW5u3rlz5+rVq9nHIPECYatzmZbEgPhzDEnagGGYQCCQmpr67rvvcp+lwi4G7CSKP8dgRySyVybl86NwgrjMr9xDKBTiGkbSwmAk75XV1tbSNG00Gr1eL+8tr9dbX19P03Rtba2IH4SjwI5XyqXEqyW0TaJ7pS8kiXtlrGPF98p4fiApkkh/npYiXLK4CR9jamtri4qK0Aefw4cPNzY2ivu3vLxcr9c7nU673Z6fny89xgg7IpkkboDf71coFOzmL3uILozy8nK3222323U6nclkYhimp6enpKTkwoULXq/X5XJVV1eXlpayraHNa4vFsn79evYk7xChVqvVajUq73a7k5OTdTqd9ALi73L30JuamgoLC202m9vtrqurs1gsIg7heoN0l2xubh4fH3c4HHq9nuvJysrK5OTkf/3rX+wZ4RxNTEwoFIre3l60yYCdRGy/4iNiGKa6urqsrMzlctnt9scffxxtLkm8tnkTJDLFWIOxPsGOYlpzgR07wzB6vZ67LKe7V2YwGNhPdVicTqfBYBDxA9b/YWOM8FJiBFcf1jaseyNeSNweXS4Xd3+M5Fjs0iL5obCwsLq6enh42OFwbNiwYboxRvptbbESPsYI8+GL+3d4eLi0tJSm6aysrLffflt6jCEpBQgJexnzkv+jw6NHj9I0/fbbb6vV6lWrVv3xj39E39GJaAGwHe3evXv//v1s+7xDRGVlZXl5OXtYUFDAKyNeQORd3ninKzHAegN7iWKlDRCtra00TbPfZDKEOWpoaGC9jS0gcrcijYhhGL/fX1NTk56ertVqTSYTuvVIvLZ5ExRVcg/CMyQtjFmH5Aes/8VjDPZSQohLbzDkJRfBQuL1GAgElEolG+GQY2mazsnJ4ToWu7RIfsAqkkiPMdJva4sVeXP73759+6mnnvrmm2/k60I6AwMD69ev/+9//xtB3XXr1n3wwQe//OUvsYdAtLFwJ2hBaGHM5FKSm127dtnt9k8//XS+DQH+jzDf+c8Qq9W6du1aWbuYG27fvi1yCEQbMEFLFrPZbLVa59sK4Edm/0cOhw4dev/997/99tvLly/v37+/trZ25m1+//33r776qsTnIcjlDgBLlhUrVjzxxBPzbQXwI7MfY5555pnm5matVmswGHbu3Llly5aZt7lixYrY2Njdu3eHLQm53AEAAKKHyGMMKYn3z372M4fD8eDBg76+vl27dlE/zao9MDCwjENmZua+ffvYDOci+b3r6+vZhCsiiOTZXbNmjcQdZIlpxuVOmz8rRHnufYAH0sKYbyvCIP1SAoDIY0zESbxRcqFAIDA5Odne3n7x4kXuH8dIpKam+v3+sMVmJZe7RCWCJZ42HwAAICzz86fTuLi4uLi4+Pj4xx57zGw2TzfDOYlZzOUOOcwBAABmTpgYIzFp/EwsUCqVgUAg4urc5OG83PsS05iL5DCnZpzGHMsc55mnCKnmAQAA5Cb8c4zEpPGR4fP5TCYTKSuXOLyk5ZRgo0x6GnPxzPMzSWOOTc8+l3nmKWmp5gEAAGRB/C+aTmlJ43lVhH8P5qbPojiJSGNjYysrK9nc1yKJrbhvCZOWM4Lc+9LTmDvJOczZdyNOYy5MOTWXeeYZwQxiU80DAADIRPj/YNI0zW4cabValK16JiQkJKA/SXV0dDQ0NLS0tMTHx0+rhby8vNLS0jt37qxcuZI9+cknnxQWFrI/YEtJSSkvLy8qKiouLs7IyCgoKHj66ad9Pt/o6Gh+fj6vQZqmRcQHlUplZmYmep2bm+tyubDFEhMT9+3bV1tb+9prr+Xl5aEfy2k0GmFJoWEURY2NjXm93qysLFRmamoK5Wr96quv9u7d29PTEwwGp6ampqamsDaThkb9dAYzMjJmPoMAAAASmf3v/JHcFldS1O/3JyQk/NhlTIxGo9FoNFu2bElPT29paZluF42NjRaLZfv27V9//TV7UviLso8++qilpSU/Pz8YDBqNxh07dqDzsqYxR6n02F/KYffKsIaxacCtVqvVarXZbCgS6/X6p556ymKxWK3W9vZ2cQPkGxoAAEAkiD/mSEwaz0OtVnd2drKHzc3NJSUl2FpnzpzRarXsxpHEvTJGkLRcPJc7I5rGXDxj40zSmDMS0rPLmmdeWBKbBhgAAEAmIn+OSU9PDwQCfX196PDBgwfsWwcPHnzttdcuXbo0MjLy73//+8CBAwcOHMA2UlFRkZyczNUwR01xQY9EoVCI1fmhKCotLe2dd96x2+3oTzNdXV2rV6/Ozs5mC9y6deuFF1747LPPRkZG7t69e+LECZ1OR1FUfX19TU3NjRs3BgcHd+zYcenSJSmDNRqNg4ODN2/eNJlMpaWlWA/4/X673X706NG0tDS2okYAyTCKogwGw/bt22/evDk0NHTkyJFDhw6pVKrU1NT33nvP5/P19fWZTCYRIyMbGgAAgIyIh6CIk8YfO3YsKysrNjZ2/fr1586dIzXIMMzp06ezsrKQaj16aOBx8uRJhmHOnj2bn59PslOYbF96GvOwzzEzSWMuZC7zzAtLwnMMAABziby5/WeLBw8e5ObmHjhw4PXXX8cWkC+XezSnMQcAAIhy5M3tP1vExcWdPn3617/+NakA5HIHAACIQuYnl0wEiAQYAAAAIDpZMDEmOrl+/fobb7wx31YsGEAHCACWGhBjwiCexryqqor91yQQFtABAoClhqScmNRPNWDmBllFXCJWVeF2NzIyYrPZ6uvrse3PsbsihuRAoYuiRAdIOotJBwgAFijR+xwTnSIu3O5Q/oKFrgIAOkCgAwQA8hEmxigUipycHO6LuWSh374XPaADBACAOGFijEajQcnqNRrN5cuX0cmwQilsAZJQikwiLiTDsBIsPITaLUKTxFVzBgcHn3/++aSkpHXr1n344Yfs+fv372/btk2lUmVmZr755ptsJjeSE9iKvL0pVsgnMTGxoqJiZGRkz549KpUqLS1t69at9+/fJw2EAh0geXSAAAAISyR7ZVihFARP04UklCKTiAvJMJIECxesdgvPJHHVnLq6uuTk5J6envb2dm6M2blzp8fj6e7uPn/+fFtbW3Nzs4gTREAyMJ2dnVar1ePx5Obmer1em832xRdfOJ1OpOtDGggFOkAz0wECACBCIsgNgBVKEWq6iAilyCTigjWMB5JgEeZiEWq3YDVahGlm0OtQKKRUKrkWopQtoVCIpmk2WWdbW1tRUZGIE0QykFIUNT4+jg47OztjYmLYrDZdXV2PPvooaSCMQEUGdICmqwMEAEBkRPI/f6xQilDTBavgQpGVTmYu4oI1jCJLsLCQtFvETeJy7949iqK4FrLng8Egm6wzNzcX3exE5F5I0DTN+lar1SYnJ7O6OxkZGejLbdJAKNABmpkOEAAAkRHh78qEQilYTReSggslm9KJ0DBKggQLSbtFbmbdCbM4ENAB4q0iAAAiIYJnH6xQCiPQdOHBFUqRScQFaxhWgkXYnVC7BbvhI3GvrLW1VcpeGc8JExMTMTEx3B0tkloPL30y91A4EPHqoAMkRQcIAIDIiCTGGAwGp9NJetfpdBoMBoZhenp6SkpKLly44PV6XS5XdXV1aWkpKtPU1FRYWGiz2dxuN/rAKOUGUV5e7na77Xa7TqczmUzoLb/fr1Ao0L45yTC1Wt3c3Dw+Pu5wOPR6/apVqyYmJhQKRW9vbygUQmVqa2uLiorsdrvH4zl8+HBjYyP2RsntzuVyKZVK9i29Xs+1kL2JV1dXl5WVuVwuu93++OOPHz9+nOQEhmEKCwurq6uHh4cdDseGDRsiiDHCgYhX546IYRjuNx8nTpzIycmxWCxer/fs2bOpqalsyBE6Jy8vD6kwsO8GfgpydX9/v1BcgF0zFotl/fr13LdIq0imJcSEW94AAEyLSGKMRESEUuZYxAUrwdLQ0MCtJdRuIX0YZ7sLBAJKpZK9N7nd7o0bN9I0nZOTYzabuTfxmpqa9PR0rVZrMpnYqIaVe+nv7y8uLqZpOi8v7/jx4xHEGKwIDegAzboOEAAAUlgY+jFRK+Kya9cuu93+6aefzrchCwPQAQKApcbC0I+JWsxm89z8OmBxADpAALDUiN58ZQuCFStWPPHEE/NtxUICdIAAYEkBMQYAAACQi4XxfQwAAACwEIHnGAAAAEAuIMYAAAAAcgExBgAAAJALiDEAAACAXECMAQAAAOQCYgwAAAAgFxBjAAAAALmAGAMAAADIBcQYAAAAQC4gxgAAAAByATEGAAAAkAuIMQAAAIBcQIwBAAAA5AJiDAAAACAXEGMAAAAAuYAYAwAAAMgFxBgAAABALiDGAAAAAHIBMQYAAACQC4gxAAAAgFxAjAEAAADkAmIMAAAAIBcQYwAAAAC5gBgDAAAAyMX/AEWTe+rNhcclAAAAAElFTkSuQmCC)

Research’s Comment:

![](data:image/png;base64, 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)

Mirror: Click here to view the mirror

Coordinated Disclosure Timeline

Vulnerability Reported: 14 June, 2020 14:24 GMT
Vulnerability Verified: 15 June, 2020 08:52 GMT
Website Operator Notified: 15 June, 2020 08:52 GMT
a. Using the ISO 29147 guidelines
b. Using publicly available security contacts
c. Using Open Bug Bounty notification framework
d. Using security contacts provided by the researcher
Public Report Published
[without any technical details]: 15 June, 2020 08:52 GMT
Vulnerability Fixed: 16 June, 2020 05:52 GMT