logo
DATABASE RESOURCES PRICING ABOUT US

figasebe.ru Cross Site Scripting vulnerability OBB-1219536

Description

Following coordinated and responsible vulnerability disclosure guidelines of the **[ISO 29147](<https://www.iso.org/standard/45170.html>)** standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence. Affected Website:| **[figasebe.ru](<http://www.figasebe.ru>) ** ---|--- Open Bug Bounty Program:| **Create your bounty program now**. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| **[XSS (Cross Site Scripting)](<https://www.owasp.org/index.php/Cross-site_Scripting_\(XSS\)>)** / CWE-79 CVSSv3 Score:| 6.1 [CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N] Disclosure Standard:| Coordinated Disclosure based on **[ISO 29147](<https://www.iso.org/standard/45170.html>)** guidelines Discovered and Reported by:| **raviakp1004 ** Remediation Guide:| **[OWASP XSS Prevention Cheat Sheet](<https://github.com/OWASP/CheatSheetSeries/blob/master/cheatsheets/Cross_Site_Scripting_Prevention_Cheat_Sheet.md>)** Export Vulnerability Data:| Bugzilla Vulnerability Data JIRA Vulnerability Data [ Configuration ] Mantis Vulnerability Data Splunk Vulnerability Data XML Vulnerability Data [ XSD ] Vulnerable URL: ![](data:image/png;base64, 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) --- HTTP POST data: ![](data:image/png;base64, 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) --- Research's Comment: ![](data:image/png;base64, iVBORw0KGgoAAAANSUhEUgAAAiEAAABLCAIAAAAphcDFAAAACXBIWXMAAA7EAAAOxAGVKw4bAAAXd0lEQVR4nO2df0wT5x/Hz8qgYIuCbeVH/QrOoWOMMSQEF+aI2Q/WNaTizzE2XUZwMcgImUTRMaabMsVlc4y5xS3OLJsxyogxhCydM4wQxxi7If5C4wBrQUS0iqxUaL9/PNmTW++55+5KD9B9Xn+1T597Pj+e5+7pPde+nykej4cBAAAAAAVQTbQDAAAAwAMLzDEAAACAUsAcAwAAACgFzDEAAACAUsAcAwAAACgFzDEAAACAUsAcAwAAACgFzDEAAACAUkyKOcbhcOzcuRO97urq0mq1fmzc7w1KtNLV1RUWFoZfT+Ewe/bszZs337t3b3w85Hrid7h9x7U4DjkXYmKtjyeK9qxvEMcD8F9mUswxt27d2rFjx0R7oSwajcbpdDqdzqGhobq6upMnT27btm2infIDxL6bM2dOf3//hPgDTCz/hXMZkMWkmGP+IwQFBQUFBQUHBz/++OOVlZVHjhyZaI8UJCgoaKJdAABg4hGfY0ZHRzdv3jxr1qxp06atWLHixo0bDMPcvXt33bp1er1+9uzZ77333ujoKPPPGsXu3btnzZoVFha2Zs2av//+m2GYzz777IUXXsANbtmyZc2aNfitw+GIiYkZHBycMmXKN998gwo/+eST2NjYmTNnvvrqqw6HAxUODw+/8cYbWq12zpw57777LjLK5bffflu0aFFwcLBer1+xYsXVq1fxRx9++KGXV8QoVq1a9cEHH+CjFi1ahFwSNS0XtVrtdDql1yeGhhK+Z8+e2NjYsLCwV155Befq6tWrL7zwglarnT9//nfffcdvUKizhGz99ttvTz/9tFarjY6OXrZs2blz5xiBvmM4q1UUD32Ojj6cMPweRw3u3LlTr9dHRkZ+9dVXDGkMLF26dPfu3aiRP//8MygoCPu8bt26jRs3CmWDOEiIRumx05NG71mh5PDD9FpRFFp26+npeemll7RabWxs7J49e3AdYrD08UAcbLKuJHwoUUhvBFAU8Tlm165dVqvVarV2dHRERUWdPXuWYZjCwkK73d7a2lpfX3/s2LHq6mpUeXBwsLm5uaWlpaWlpbW1ddeuXQzDWCyWhoaGO3fuoDrHjh3Lzs7G7U+fPv38+fNoKSk3Nxc1wrJsU1NTc3Oz3W7ftGkTqrlt27ahoaG2trb6+vqGhoZ9+/Z5udra2pqfn9/b29ve3m40GgsKCrBXLf+AvSJGsXLlytraWvRpT08Py7IWi0WKaVk4HI7y8nKTyST9EEpobW1tKFfd3d2lpaWovKCgIDQ09OzZs3V1dcQ5hhHoLCFbZrN57dq13d3djY2N6enparWaIfUd0QrRQ5+jow8nfCCxxwcHB8+fP9/e3n7gwIH09HSGNAbMZrPVakX1jx8/7na76+vr0Vur1Yp6jZgNoUHCNyoaOyVp9J4VSo7QCStKQUFBYGDgpUuXrFbrwYMHcTkxWMp4EBpssq4kcvFLI8BY8YhhMBhaW1u5JSMjIxqN5vLly+jtsWPH0tLSPB5PZ2cnwzDd3d2ovKamJiUlBb1OS0s7cuQIqoOGILdBVIhfMwxz+/Zt9LapqWnu3LnotU6nGxwcRK9Zlk1NTaW4fenSpYiICIpXxCiGhoZCQ0NR5erq6qysLImmuSHgkhkzZnCD0v1DYGBgTk4ObpB/LB2v0HCuGhsbUa5GRkbUajU3ZOwJ1z2hzuLbGhgYCAgI8Oo1ivO4UMjDsUTnkTCciKGh8oGBAVyTOAbsdntISAhqMzU1tbi4OCcnBx0eGhrqcrmEskEcJHyjorFTApfSs/zkEMP06jjucOXmR61W4wO55oTOCKHxIP0cpNTnQ4lCeiOAogTQZyCHwzEwMJCYmMgt7Ovrc7lcsbGx6O2CBQtQdzIMo1arZ8+ejcu7u7vRa4vFcvz48WXLlh0/ftxkMtEX6zUaDb7/jYqKGhgYYBjm5s2b/f39MTExqNztdgcEeDv/xx9/lJSUnD171uVyud1ut9tN8YoYRXBwsMlkqq2t3bBhQ01Nzdq1ayWaFiUkJIRlWYZhrFbrpk2b9u/fHxwcLP1wodC4uTIajShXfX19DMNwQya2KdRZfFthYWHLly9PS0tbsmRJVFRUSkrKM888I9FzoodjiY6RMJyEQtNoNNwVIeIYiIyMjIuLa2pqio+Pt9vtZWVlcXFxo6OjVqv12Weffeihh4jZoAwSL6NSYhcKXErP8pPT09MjdMLS6evrc7vd3APRCx/OCOnnIKU+wzB6vR63ef36dR+MAuOMpGvl1KlTx2gmOzsbrRIcP34cXbjl4nQ6VSpVS0sLHs0qlfdCn8ViycvL27dvn1qtttlsmZmZPhhauXJlVVVVbm5uc3NzTU2NRNPom+/o6CjO1eDgYEhICK6gUqmio6MZhlmzZk1lZeX+/fs3bNgg3Su/hDYWW99///3vv//e3t5ut9uLi4ufeuqpTz/9VFGLFMY+nOiYTCar1Xr58mWz2Tx9+vSkpKSGhga8UMaQslFaWio6SIj4vWeVTg4j7YxQCPRFDbifEL3TMRgMLMtySyTe4dbW1nJvThMSEqxW64wZM/AiAMZrrUzo5lej0Xit2nHp6+sLCAjAb1mWRQcKeSUUhdPpDA8P//jjj7Ozs3FrdNMIg8HQ2NiI31ZXV2dmZhKDOnTokNFoxIstomtllNCIufJaUamtrRVdK8NpEbLFhWVZo9FIcZ67Via6ICM3OgR9OBFD47sqNAaamppSU1OzsrLq6uo8Hk91dXVhYWFERITdbvfwwNkgDhJ65xJjpwQupWf5ySGGefv2bZVKxV2RE1or6+zsRG+5a2VCZ4SUtTLRc5B+JeFCiUJ6I4CiiM8xO3bsSE1NbWtrs9lsBQUFDQ0NHo8nLy8vKyuru7u7vb09OTl57969nn86dfny5Tabrb29PSkpqby8HLdTVlaWmJhoNpv5JgYHBwMCAjo6OjzUK8ubb76ZlpaGvjzu2rVr27ZtXu0YDIbq6upbt251dHRYLBbuHEP0ihiFx+PJyckJDQ09fPgwblnUtMfjqaqqiouLa2ho6O/vP3LkSHh4OJ5y+CdefHz8vn37uJ86/83IyIiU0IRyZbFYuCELzTHEtPBtnT17NjMz88SJE/39/d3d3Xl5ebgfuX3HbVz6HONDdB7qcBIKjXj5ExoDBoPBYDCg7wE2my00NDQpKQl9JJQN4iAR/QLBj50euGjPEpNDDDM1NTUvL6+3t7ejoyM9PZ3Y1PLlyy0WS2dnZ3t7e2JioujJKDQeZJ2D9CuJF0JRUBohPlkEFEJ8jhkZGSkpKdHpdGq12mKx9Pf3ezyewcHB/Px8nU5nNBrLy8vRBRGdGxUVFQaDYcaMGa+99trQ0BBuB93kHjhwgGilvLw8JCTkwIEDlBPM6XQWFRUZjcaQkBCTyYS//mAaGhpSUlLUanVERERxcTH3UrVr1y6+V8QoPB5PbW2tRqPhOi9qGvHRRx/FxMQEBgYmJCTU1NRwo/C60Hz77bcxMTEul8vzz8ngBZ6BREMj5spmsz3//PMajSYuLq6yspI4xwh1Ft+Wy+UqLy+Pi4sLDAw0GAy5ubm9vb38vuPHK3GOkRudhzqchHqceLkXGgM5OTnLly/H1VJSUkpLS9FroWwQB4noHMOPnR64aM8Sk0MM89KlS0uWLNFoNPHx8Xv37iU21dvbazabNRpNTExMRUWFlJNRaDwQB5sPVxIvhKIQakTuT2yAMTLF4/H4a9mtq6srISEB/27Si7t37+p0OrvdPtnUL/6b0Dtr8gPDiYJCyblw4cLixYuvXbsm90C5g80vg/N+H+EPDOP3P/8ff/wxPT0drgiAX4DhREGh5LAsO3fuXP+2CTzwyP4Nrm84HI6qqqrVq1ePjzngwQaGEwX/Jmf79u1RUVFZWVmXL18uLS0tKyvzS7PAf4dxuo/BS6LjYw54sIHhRMG/ycnIyKiurjYajbm5uYWFhUTZHgCgIfrEBgmpesbrWdn98kQuMzOzoqKCW1JfXx8VFSVUf2KzR3kIj9/ijh4HKL9WF60vpVxRxpKo8UyyXLi+TaqECzkw4c4AUhC/jxlnse77RRY+OzsbK5shamtrkbjZJEQoq9zy8ezo+6WXiYwlUZNZ+l6KbxPecRPuACCXyajtf1/IwmdlZbW0tHB/Y0MUZ5w8CGV1orJ9X/QywGfCO27CHQBkITLHcMW6jx49ygio7jMkrW+iqrmoSD5XrJuooO5VE0mgT5s2bdWqVTdu3Ni4caNer585c+brr79+9+5dVJOiHy7XPcysWbPS0tLwrcyvv/7qdDozMjKkSKZTxNul68PL2shAaGtIXO6lyi6qn0+0TtwZgaLbT0ys3A0auIh2n9yNKvh9xJevF3KYb4sufS9lJEuJUUjGn77DgsQtNrw6jn6GEr2VFazQxgf8rgcmLSJzDFese+nSpUKq+4yA1jdf1VyWSD5RQZ0L8qexsZFlWbvdvmDBgv7+/ra2tlOnTnV2dmJFdIp++Fjc4y6X1dbWms1m6cJuQuLt0vXh5W5kQMdLlV1UP59onbgzgpCfQowlLtHuk7tRBb+P+PL1Qg7zbdGl76WMZCkxEsMR3WFB+hYbXETPUKHLgsRg5Q4eYDIi+sRGSKedq7rvIWl9E1XNpYvkU/TkcU2GYW7duoXeNjY2qlQq/H/gpqamefPmecQ0keS65+WAWq1GCVmwYEFtba1H+N/pXs8qGQHxdt/04UU3MpDyzN/rI7p+PtG60M4IRD+lPLmVHhcle1zkblRB7CMpDhNtCR0rcSRLiVFIxl8oFiHfhE52bh3RM5ToraxgueCND4RGTnd3d0xMDMUZYEKQ9/8Youo+I6z17aVqLksSXIqevEajmT59OnptNBpDQ0OxYH5UVBR6NkjRDx+LewzDzJkzZ8GCBXV1dUlJSUjhg1KZ7zlfvF2WPrysjQx8gK6fT7RO3BlByE8hfI5LtPvkblQhZVcCIYeJtihIGclSYhQKR2IsXi4RT3aM6BlKuSxICZaROXiioqKamppE4wLGGf/8B5Oo9e1yuaRUozSrqJ48Hx8Uy9FyWWdnZ2Zmpqz9YMbugNJq/3SJeCHr/J0R5Prpc1wSszf2jSq8oDjsd1sTKKpPhH6GSrwsUJA1GKZOnRoZGelbIIBy+GeOiYyMDAkJGRgYePLJJ3FhV1eXlGp0Fi5cuHDhQoZhTCaT2Wz2YY4xGAyBgYF//fUX+nJ3/vx5/MVq7O5lZ2dXVlZ2dHQUFxejkvDw8KGhoTt37qDvgDabTbqr0h24fv263W5/55130FvuVz+n03nlyhX0lb+jo+N///ufdAe4PPLIIwaD4aeffjp16tThw4clWjeZTHl5eQcPHnz22We1Wi2lpt/jEs3e9OnTw8PD//zzzyeeeAIXSh8eshwm2ho7ojGOMRwfoJyhEi8LQsgdPMDkRPxLkE6nczqdFy9epFfLzc1dv379mTNnenp6du/evX379rFUYxjm3LlzL7744s8//3zjxo0rV65UVVUlJSWJestn6tSpq1evLioqunLlypkzZ8rLy3NycsYYBeaxxx6LiIhob283m82oRKvVpqSkFBcXX7t27eLFi/hJaXh4uNPpvHDhAuW3atId0Ov14eHhn3/+ucPhuHjxYnl5OffT4uLiq1evomCxY6Ju8Ds6Ozu7uLg4PT3d65c8FOtBQUGZmZllZWVIy4TuJ98luXF5hSOavaKiovz8/NOnT1+9enXDhg2//PKLrOHBTxTFYb4tYpLlQo/Rh3CIcUlByhkq94TiIjp4+IN5eHhYevvAOCHloQ0S696zZw9Fcpyv9U18vCkqko+PouvJe4SfrvPfUvTD5brHp6SkBO9FhhASG9+0aZNv+xcQXZW1kQG3BewGv2UvVXaKfj7ROsJrZwQpuv1cl+Ru0MA9VrT75G5UQewjr0QJpYJoi59kUVuiJ5pXjPxwJO6w4JGwxQa3XPQMJXorK1jRjQ8ogxmYJPhT2x94wAD9fAAAxshk/J8/MEkA/XwAAMYIzDEAGSQRv3Llyol2BACA+xiYYwAyoJ8PAMDYUXCOEVUW8k16aHh4+OWXX/Y68MaNG6+++qper4+Ojt68efO9e/fo5YgXX3zxiy++wG+vX7++YsWKsLCwKVOmTJkyJTIy8q233lL0lyrcDEw2Iabh4eGjR4+C/iAAAGNBwTlGCRXu4eHhzMzMkZERr/LXXnvN7XazLHvixImTJ09u27aNXs4wzIULF1pbW7nf0/Pz810uF8uyTqfT6XSePHmyvb29oqLCvyFwAaFyAAAecCbwN20+/Naws7Pz/fff9zpwcHBQpVJxFZDi4uIo5Yj169dv3boVv3W5XAEBAX19fVxzp06dSkxMlBmWj8AvLwEAePAQuY+RqCpPFHXny4ALabYzDHPmzJmZM2ei/6mhA3fv3s0Xcp8zZ86WLVu8nOzv7w8JCeEqIPX19VHKGYZxOByHDh3iyrj29vYGBgbq9XqGYX799deHH344LCysrq4O/1G/p6fnpZde0mq1sbGxe/bsQb+2Gh+hct8U6UX9AQAAUBrxtTIpqvJEUXevdigy3Q6HIzs7u6Ki4umnn8ZGm5ub5QrUS2f//v1ms3nWrFm4xO12Y+knFFFHR0drayuW4SsoKAgMDLx06ZLVaj148CA3P0oLlctVpJfoDwAAgOLQb3MkqsoTRd1FJdBxBZPJtH79ei+jfCF3bgUhgXqPwH+SPf/+C/HcuXNZluWW4MpDQ0MqlQr9K/vEiROowsjIiFqtxv+prqmpwSYYZYTKuchVpPfBHwAAACUQv48hqso/99xz0dHRer0+NTXV6XRiUXeGYWpqaoh/quAfhcq3bNlSX1+fkpLCrewvgXoiP/zwQ0xMjJBY4cDAQGBg4MyZMxmGMRqNqLCvr8/tdnMl03F9WULlxAzQ8UGRXqI/AAAASuPL78osFsvixYsbGhpYlq2rq0OFaLns5s2bzc3NWVlZEo8aGhqqqak5dOjQpk2b+Pu/KsTevXuLioqEPuUumoludiILYgYk4neVeAAAgHFA9hyDBbcffvjh6OhovLuqyWRiWRaLuks8SqVS1dTUrFixIjU1devWrbg+EnJHr0UF6nU63dDQEJ6ibDabwWCglJ88eXLt2rV6vT45Ofn27dt6vV6v16tUKjSjIDHXmzdvMgyD758MBoNKpcKy5OfPn/dX3kTBKvHcQizhjv1RWsIdAADAB2TPMUKC216i7hKPUqvVjz76KMMwlZWV+/fvP336ND6EIlDvxbRp055//vmCgoKenh4kp48W64TKbTZbW1sbupnQaDQsy7Isq9PpXC7XH3/8MW3atPT09IqKip6enqqqKmRi6tSpZrO5qKioq6sLueSvvGG8hMq5//30iyI9AADA+OPLWtmRI0e+/vrriIiIxYsXz507F5evXLnS7XYLzQdCRyHmz5+fn5+Pf2ql0WhSUlKSk5PT09MTExNLSkroLh08eNDtdickJGRkZKSnp5eVlVHKo/8hIiJCpVKh18HBwYWFhV9++SXDMPv27auvr4+Pj09ISMAmqqqqRkZGEhISzGazbxd0ega0Wu3bb7+dnJz87bffdnV16XQ6/FFJSUlGRsaSJUvmzZtns9ni4+MZhvn4448jIiKSk5MzMzOzsrLWr1/vg0sAAACKMhm1/bu6uhISEu7cuTP+pkdHR6U8+bhw4cLixYuvXbs2Di4BAADcv4Am5r+Q+GidZVn+jQgAAADgRcBEO3DfsH379qioqKysrMuXL5eWluLlOAAAAEAIuI+RSkZGRnV1tdFozM3NLSwsXLNmzUR7BAAAMNmZjM9jAAAAgAcDuI8BAAAAlALmGAAAAEApYI4BAAAAlALmGAAAAEApYI4BAAAAlALmGAAAAEApYI4BAAAAlALmGAAAAEApYI4BAAAAlALmGAAAAEApYI4BAAAAlALmGAAAAEApYI4BAAAAlALmGAAAAEApYI4BAAAAlALmGAAAAEApYI4BAAAAlALmGAAAAEApYI4BAAAAlALmGAAAAEAp/g8hP5ehAs9f1wAAAABJRU5ErkJggg==) --- **Screenshot:** ![figasebe.ru vulnerability](/twimages/screen-1219536.jpg) **Mirror:** [Click here to view the mirror](<http://1219536.openbounty.org/mirror/>) ### Coordinated Disclosure Timeline Vulnerability Reported:| 9 July, 2020 07:56 GMT ---|--- Vulnerability Verified:| 9 July, 2020 08:05 GMT Website Operator Notified:| 9 July, 2020 08:05 GMT a. Using the ISO 29147 guidelines| ![](/images/done.png) ---|--- b. Using publicly available security contacts| ![](/images/done.png) c. Using Open Bug Bounty notification framework| ![](/images/done.png) d. Using security contacts provided by the researcher| ![](/images/done.png) Public Report Published [without any technical details]:| 9 July, 2020 08:05 GMT Vulnerability Fixed:| 26 July, 2020 14:38 GMT ---|---