Lucene search

K
openbugbountyDevl00pOBB:1249180
HistoryAug 03, 2020 - 7:24 a.m.

www1.1moviesgold.com Cross Site Scripting vulnerability OBB-1249180

2020-08-0307:24:00
devl00p
www.openbugbounty.org
5

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:

&nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence;
&nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence.

Affected Website: www1.1moviesgold.com
Open Bug Bounty Program: Create your bounty program now. It’s open and free.
Vulnerable Application: Custom Code
Vulnerability Type: XSS (Cross Site Scripting) / CWE-79
CVSSv3 Score: 6.1 [CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N]
Disclosure Standard: Coordinated Disclosure based on ISO 29147 guidelines
Discovered and Reported by: devl00p
Remediation Guide: OWASP XSS Prevention Cheat Sheet
Export Vulnerability Data: Bugzilla Vulnerability Data
JIRA Vulnerability Data [ Configuration ]
Mantis Vulnerability Data
Splunk Vulnerability Data
XML Vulnerability Data [ XSD ]

Vulnerable URL:

![](data:image/png;base64, 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)

HTTP POST data:

![](data:image/png;base64, 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)

Research’s Comment:

![](data:image/png;base64, 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)

Screenshot: www1.1moviesgold.com  vulnerability

Mirror: Click here to view the mirror

Coordinated Disclosure Timeline

Vulnerability Reported: 3 August, 2020 07:24 GMT
Vulnerability Verified: 6 August, 2020 08:40 GMT
Website Operator Notified: 6 August, 2020 08:40 GMT
a. Using the ISO 29147 guidelines
b. Using publicly available security contacts
c. Using Open Bug Bounty notification framework
d. Using security contacts provided by the researcher
Public Report Published
[without any technical details]: 6 August, 2020 08:40 GMT
Vulnerability Fixed: 9 September, 2020 06:34 GMT