Lucene search

K
openbugbountyDevl00pOBB:1245183
HistoryJul 31, 2020 - 8:57 p.m.

alarko-store.com Cross Site Scripting vulnerability OBB-1245183

2020-07-3120:57:00
devl00p
www.openbugbounty.org
47

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:

&nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence;
&nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence.

Affected Website: alarko-store.com
Open Bug Bounty Program: Create your bounty program now. It’s open and free.
Vulnerable Application: Custom Code
Vulnerability Type: XSS (Cross Site Scripting) / CWE-79
CVSSv3 Score: 6.1 [CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N]
Disclosure Standard: Coordinated Disclosure based on ISO 29147 guidelines
Discovered and Reported by: devl00p
Remediation Guide: OWASP XSS Prevention Cheat Sheet
Export Vulnerability Data: Bugzilla Vulnerability Data
JIRA Vulnerability Data [ Configuration ]
Mantis Vulnerability Data
Splunk Vulnerability Data
XML Vulnerability Data [ XSD ]

Vulnerable URL:

![](data:image/png;base64, iVBORw0KGgoAAAANSUhEUgAAAiEAAAA3CAIAAABVZQ1/AAAACXBIWXMAAA7EAAAOxAGVKw4bAAASgUlEQVR4nO2df0xT1xfAn1ihQFGgtKKt8mMMCTGuc9hhpo4oMw4bUh06h0xwOkXDmDJ0lLGtQ4NMYcvMwoxTg85sxizEEGecaZyrrFFUVruCtUNTaq1Mfgy0YinV9/3j5vvy9n7xKBT8cT5/vXvfeeeee8999/Td+3rfOBzHMQAAAADwAwFjbQAAAADwzAIxBgAAAPAXEGMAAAAAfwExBgAAAPAXEGMAAAAAfwExBgAAAPAXT26MiYuLu3r1KlsSeKp5lrz5LNXl6eXq1aubNm0aaysABp7QGPPXX389fvz4pZdeYkwCTzXPkjefpbo81eTl5cXGxo61FQADg8SYtra2sLAwxlO9vb27du1iSw6T+vr6zMxMtuRYwdEaI34VT0a22UcHwpv//vvv2rVrJRKJTCb7+OOPBwYG/NpWFIiy2traIiIifFNC6Zlbt24NDg4+fPjwyJjoK/fv3//www9jYmKCg4NnzJjx5ZdfPnr0iEO+ra1tHIlp06ZpNBq6O8hi48ePj4uL27FjB9Lscz/02ePkEru6ukwm05YtW4ajkNu2jo6O1atXi8VimUy2devW/v5+uhkAMzgnNptNJBLxOcUh6QNKpfLMmTNsybHCtzqObMuMpnI/QXgzMzMzOzvb4XBYLJZ58+aVlJSMZnWIsmw2W3h4uG9KyD2zs7MzICDAaDR6vd4Rs9InsrKy1Gq1xWK5e/euTqdLS0trbGzkkEdN4Xa73W53X1+fyWRKTU0tKyvDcdztdrOJGY1GpVJZXl6OD6MfjsiFbMfDh6j+kiVL3nvvPafT2draunDhwuLiYn8U90zyJMYYp9MZHh7u8XgYk2MIxJjhQ3izr69PLpe7XC6U39jYmJCQMJrVcTgcs2fPRgdKpdIHDZSe+YT4oq+vTyAQ9PT08L+EbnlDQ0NSUhIfseTkZMZTPhftw4XkY8KtI4jL5RIKhZS+Si8aYITXesw333wTFxcnFovffffd3t5eDMN6e3tjY2NdLte4ceMOHz5MTn711VdhYWF79uyZPHlyREREbm7uw4cPkZ5Lly7Nnz8/LCxMJpO99dZb165dYyyuvr5+8eLFEyZMoCSXLVu2Z88elHn16tWgoCBkDIZhGzdu3LZtG7fAiy++yH05xYxLly7NnTs3ODhYIpGsWLHi9u3bdFPpMuj5eteuXRKJZMqUKQcPHiTLNzc3i8Xi8+fPo+SDBw82btwokUimTZv2xRdfcExoMDYdxQuMChnt6e/vX7duXVhYWExMzOeff85Y7qNHjzQazeTJk0NDQ1esWNHV1cVmMCqiuro6Li4uNDT07bff7urq2rZtm0QiEYvFa9euffDgAd25wcHBt27dCg0NRfmtra1Tp07l4wJycREREatXryb8eOfOnaVLl4aFhcXFxVVXV3PPgMlksitXrqCDixcvosxff/2V4xKKALmjdnV1kX3B0VBkX/BvOv6GPX78GMMwgUBAl2H0KSNCodDtdg867yQUCr1eL70fMlrL54Zi7Jn0dqOXSEC4dZjDxbZt24jqh4aGPnz4kOirHo8nMDAQ++8NiMY9nnfBc8XgMcblchmNRoPB0NjY6HQ6S0pKMAybNGmSxWJBD845OTnk5LJly1wuV2Nj4+XLly9fvtzU1LR7926kSqVS5eXl2e32hoaGefPmCYVCxhLZFmNUKpVOp0OZJ0+efPz48enTp1FSp9NlZGRwC6jVau7LKWY0NTVt2LChvb3dbDbL5fKCggK6qYwyLpfLYrGYzeba2tp58+YRwr29vcuXL6+srJw/fz7KKSwsdDqdTU1Np0+frq+vr6mpYfMCY9NRvMCmkG5PeXk5mhI5ffq0Xq/ft28fvcTdu3frdDqdTme1WqdOndrS0sJhMOokDQ0NRqPR6XQmJSV1dnaaTKYLFy7YbLbS0lI25yKuX79eXFxcVVXF0wUul8tkMqE+abfbCf0FBQWBgYGtra06ne7IkSOEHgkNtnbOy8tbtGgRGqQoXLp0adGiRXl5eYx1EYvFZF9wNBTFFzybjr9hoaGhGRkZq1at+uOPPyjjGqNP6fT29mq1WvodQaGjo6OsrEytVtP7IaO1fG4otp5JaTd6iXSGOVxwVH/nzp1r1qzB/nsDonGP513wfMH9mGOz2TAMu3fvHkoaDIb4+HjiFONcGbrEbrej/Lq6upSUFBzHu7u7BQIBeXqXwG63x8bGomOXyyUSibq7u+lJp9MZEhKCNCiVyqKiouzsbFTixIkTPR4Pt4Ddbue+nKMdWltbo6OjuZ+LCRkMwwj7yS2TkZGxefNmIt/r9YpEops3b6JkfX19amoqo2aOpiObxKiQbg+O41FRUcSDP5pVp2uWSqVNTU3kHDaDURHE5ExDQ0NAQEBfXx9KGgwGYmKB4lyEw+GIj48/duwYzjnzgJoXp/XJhoYG1Ce9Xq9QKCTMq6urI1ZZHDQYi0AWVlRUREZGrly50mq1okyr1bpy5crIyMiKigqi3eh1IYznbijKJfybjqdhOI7fu3evpKQkMTFRIBAkJCRotVq0RET3KdmMqP8TGBiYnZ3tcrno9zghFhkZKRQK8/PzUbekSDJaS4bsTfKFjD2TsQ8PugYzzOHC4/EwqtVqtenp6cSSG2Xc4+PK542hrceQV0c5YoxQKCTyW1papFIpOl61apVCoSgqKqqqqjp37hwh4/V6nU4nOq6rq1u4cCFxipJUKBRnz55tb2+Xy+U9PT1SqdTr9R44cGD58uV8BAa9nExTU1N6evrUqVPRHRUeHk7vc3xkUE5paWlAQMChQ4eIfKfTGRgYSCStViu663AcjyLB3XTk4hgV0u3p7u4mDyiRkZGEgwh6enoEAgFl7ZrNYI5OQklSvIlITU3du3cvvTo4U/NyFEcxr6WlxeeV/O7ubrVaLRAIUFIgEKjVasoKB70uhGE8G4qjLoxJnoaRcbvdBoMBLeAz+pQoKCQkBEXf2tra6OhoNDjSzSPEnE4nWRXjcEyxdlBvsvVMRuV81vmHOVzQ1Z44cSI+Pr6zs5NuxlBd+fwwqv+P+emnnw4cODBr1iyPx1NUVPTBBx+g/PHjx0+ZMgUdc7+1nJGRodPpTp48qVKpJk2apFAo9Ho9+cGWW2DQy8mo1eoFCxbo9Xqj0Xjq1CnGGvGRwTCsr6+vrq7u2LFjJSUlxJwvB0YS3E3nA263OyAg4PLly0i/yWQiSqEwfvx4n0thhD5RdufOHZPJxFYdns07KPznyjAMu3HjRkFBgV6vLy8vRznl5eV6vX7z5s03btzgqIu/4WkYmaCgoLlz5+7du/f48eMoh82nAQEBMplMJpPl5uZGRUUdOHCAW2zKlCnc3YNu7aDe5N8zeTLM4YJCc3Nzfn5+XV2dWCwejlXPHdwhyLfnGIw0V3bixAk0V0bBaDTK5XJKptfrjYqKIiYZKEkcxw0Gg1KpzMzMPHXqFI7jNTU1hYWF0dHRxGMQt8CglxPcvXuX+P2FrKU/o/CRQQ0iEAhaWlpwHFepVAUFBUTteM6VcTQdn7ky+k88kUjEOGdCRiqVGo1Gcg7HFBCfX3B0b6JMcg5ZFWPzchSH5spsNhvK922uLD8/XyQSFRUVkX+r4jje2dm5ZcsWkUiUn5/PVhc+c2U+P8fwNAxBnjfDcVyv16PpRLpPGc04duyYXC53u9383x2lnKJby9ObjD3T5+eYYQ4XlGeshISEH3/8kc0MeI5hw/cY43K5BAIBMdlKJFGMycrKcjgcZrNZoVBotVocx1taWpYsWXL27NnOzk673b5+/XqVSkVoRrOier1+5syZRCYliZBKpVKpFMk7HI6JEycqFAr+AtxnyWseUqm0pqamp6fHarWq1erw8PB79+4JBAKLxULMEtBluMcRi8UiFApNJhNKrl+/PjMz0263m83m2bNnE1NGFDiajuIFukLG2y8/Pz81NdVsNjudzt27d6O/OFCqX1FRoVQqTSaTw+FAP0jZDOZ5dzF6k1IopYXpzctdHPpfiM1mM5vNs2bN8uGuzsnJIaIUHZvNlpOTw1YXsmF8Goq7LpQkT8NwHLdYLFKpdP/+/U6ns6enB5laUVGBs/iU0bDk5OR9+/bxjzGUfshoLaM3KR5n7JmM5ZJLtNvt5Pl5SqE+DxfkHw3p6emFhYVuEhQzIMaw4XuMwXFcq9WGhITU1taSk9XV1SKRqLKyUiqVhoeHr1mzBs3tejwerVabmJgYGBgolUpzcnLa29sppRQXF5eWlhL6KUlEdnZ2VlYWkUxJSaHIcAtwnKVUVq/Xp6SkCIXC6OjooqIiVPGSkhJylekyg44jhYWFCxYsQMcul2vDhg1RUVFyuZxYmKXD0XT4f71AV8h4f7rd7i1btsjl8pCQkIyMDPSLmyLp9Xq3b98eFRUlFArVajX6QcpoMM+7i9Gb9HuP3MKMLuAorr29XaVSiUSi2NjYyspK/93VbHUhDOPTUNx1oSf5c+rUqbS0tIkTJ4aEhMyaNWv//v0on9GnjIYdPXo0Nja2tbWVZ4zBaaMBHUZv4v/1OJ+eSS/R7XYLhULGlwuGM1xQ5mbI0IdBNO6R2wpiDGKQGOMD3B2Rm8TExAsXLrAlgaeaUfYm+jnvJ+XQM580CgsL6a+TDJPhDGUAAcMftcaQ69evcySBp5pR9qbRaIyPj/eTcuiZTxpVVVXDfEEA8BOj917ZwMDAO++8888///CUhy3TgaGyY8eOgwcPdnR0XLx4sbS0ND8/f6wtAkaJCRMmzJkzZwQVDgwMGAwGuVw+gjqfT0YvxkyYMCEwMLC4uJiPMGyZDvhAWlpaTU2NXC5H/7TPzc0da4uAp5UNGzYUFBRUVFSMtSFPP9xTaYPOSFIE3G73qlWr2NYJm5qaiL8ZcrNz507iHV82amtrk5KShEJhUlIS2xtZjEYy4kPjAAAAANwM8hwTExPT2dnJU6C/v3/JkiVer5dNODIy0uVyDRb1MIzHH9y+//77srKyqqoqh8Oxb9++vXv37tixg49mNtD7iBaLJTw8nHg9cTgKAQAAgMHnyoKCgngKtLe3p6enU3Y2FAgEiYmJQ7Lpzp07Vqs1LS2NQ6a8vPzQoUNLly4Vi8Wvv/768ePHKysrh7OzaVBQUFBQENprMuj/+KwNAAAAwIb0HUyOjdaRQExMzCeffELRQGy1zQ3blulse9o7HA5yEHr55ZfPnTuHMW0DTq8O43cH+BgGAAAADIkhrPnz2ZrbB7i3TGfc0x59Moj4wAxizpw56AMPbFvrI9i+O8AGx57qAAAAwCBwL9ewrZazbc3NcQn91KBbprPtac9dBMa+DbiN5bsDZEnK33EH3aUcAAAAYGMIzzF//vnnG2+8IZPJJBKJUqkc/pJ4cnKyx+O5efOmRqMhvjF35swZpVKJvmAYERGRlZWVmpr60UcfVVdX//7770gGbVHOplYkEnF8AFEoFE6bNg0dJyUl2e12biNDQ0M1Gk1ra6vH40lOTh5SBQEAAJ5zhhBjRmqjdQI+W6Yz7mkvEoncbvfAwABZ25UrV/z0NVP6LuUAAAAAH/jGmI6ODqfT+emnn77wwgsymYztM8lDQqPRWK1WqVSqUCg2bdqEYdijR49OnjxJeWv5lVdeyc3N1Wg0hw4dOnHiBIZhkyZNksvler2ekGlubl6wYAGfQt1u961bt9Cx1WqdPn06t/ymTZsUCkV0dLTVatVoNEOqIAAAwHMO3xgjkUgiIyO/++673t7ev//+W6vV+lCY1+sVCP6zQ5pYLP7666/NZjP634zBYIiOjo6Li0Nnr1279uabb/72229dXV23bt369ttvFQoFOvXZZ5/l5eX98ssvXV1d58+fX7lyZWlpKTHhxk1RUdHt27ebm5u1Wq1KpeIWdrlcZrO5uroaPkwEAAAwVIawJ+bPP/9cVFSENuXOzs5G7woPCaPRyPjcEBMT88MPP2C0ibKEhITU1NT8/Hy0FL948WLi83zvv/8+2pnGZrNNnz69oKCA56chRSJRSkrK7NmzPR5PZmbm9u3bueWRYQAAAIAPjMNZtlEZcfr7+5OSksrKytatW8cmM2PGjCNHjrz66qt+sqGtrW3mzJn379/3k34AAACAzOjt7R8UFHT06NHXXnuNQwa2TAcAAHiWGL19lzEM4w4wAAAAwDPGqMYYAAAA4Lli9NZjAAAAgOcNeI4BAAAA/AXEGAAAAMBfQIwBAAAA/AXEGAAAAMBfQIwBAAAA/AXEGAAAAMBfQIwBAAAA/AXEGAAAAMBfQIwBAAAA/AXEGAAAAMBfQIwBAAAA/AXEGAAAAMBfQIwBAAAA/AXEGAAAAMBfQIwBAAAA/MX/ACIcS7a1V7YEAAAAAElFTkSuQmCC)

Research’s Comment:

![](data:image/png;base64, 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)

Screenshot: alarko-store.com  vulnerability

Mirror: Click here to view the mirror

Coordinated Disclosure Timeline

Vulnerability Reported: 31 July, 2020 20:57 GMT
Vulnerability Verified: 31 July, 2020 21:11 GMT
Website Operator Notified: 31 July, 2020 21:11 GMT
a. Using the ISO 29147 guidelines
b. Using publicly available security contacts
c. Using Open Bug Bounty notification framework
d. Using security contacts provided by the researcher
Public Report Published
[without any technical details]: 31 July, 2020 21:11 GMT
Vulnerability Fixed: 7 September, 2020 03:32 GMT