Lucene search

K
openbugbountyDevl00pOBB:1244265
HistoryJul 31, 2020 - 9:55 a.m.

7ameem.com Cross Site Scripting vulnerability OBB-1244265

2020-07-3109:55:00
devl00p
www.openbugbounty.org
5

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:

&nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence;
&nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence.

Affected Website: 7ameem.com
Open Bug Bounty Program: Create your bounty program now. It’s open and free.
Vulnerable Application: Custom Code
Vulnerability Type: XSS (Cross Site Scripting) / CWE-79
CVSSv3 Score: 6.1 [CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N]
Disclosure Standard: Coordinated Disclosure based on ISO 29147 guidelines
Discovered and Reported by: devl00p
Remediation Guide: OWASP XSS Prevention Cheat Sheet
Export Vulnerability Data: Bugzilla Vulnerability Data
JIRA Vulnerability Data [ Configuration ]
Mantis Vulnerability Data
Splunk Vulnerability Data
XML Vulnerability Data [ XSD ]

Vulnerable URL:

![](data:image/png;base64, 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)

HTTP POST data:

![](data:image/png;base64, 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)

Research’s Comment:

![](data:image/png;base64, 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)

Screenshot: 7ameem.com  vulnerability

Mirror: Click here to view the mirror

Coordinated Disclosure Timeline

Vulnerability Reported: 31 July, 2020 09:55 GMT
Vulnerability Verified: 31 July, 2020 10:01 GMT
Website Operator Notified: 31 July, 2020 10:01 GMT
a. Using the ISO 29147 guidelines
b. Using publicly available security contacts
c. Using Open Bug Bounty notification framework
d. Using security contacts provided by the researcher
Public Report Published
[without any technical details]: 31 July, 2020 10:01 GMT
Vulnerability Fixed: 29 August, 2020 16:41 GMT