logo
DATABASE RESOURCES PRICING ABOUT US

qub.ac.uk Cross Site Scripting vulnerability OBB-1261780

Description

Following coordinated and responsible vulnerability disclosure guidelines of the **[ISO 29147](<https://www.iso.org/standard/45170.html>)** standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence. Affected Website:| **[qub.ac.uk](<https://www.qub.ac.uk>) ** ---|--- Open Bug Bounty Program:| **Create your bounty program now**. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| **[XSS (Cross Site Scripting)](<https://www.owasp.org/index.php/Cross-site_Scripting_\(XSS\)>)** / CWE-79 CVSSv3 Score:| 6.1 [CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N] Disclosure Standard:| Coordinated Disclosure based on **[ISO 29147](<https://www.iso.org/standard/45170.html>)** guidelines Discovered and Reported by:| **raviakp1004 ** Remediation Guide:| **[OWASP XSS Prevention Cheat Sheet](<https://github.com/OWASP/CheatSheetSeries/blob/master/cheatsheets/Cross_Site_Scripting_Prevention_Cheat_Sheet.md>)** Export Vulnerability Data:| Bugzilla Vulnerability Data JIRA Vulnerability Data [ Configuration ] Mantis Vulnerability Data Splunk Vulnerability Data XML Vulnerability Data [ XSD ] Vulnerable URL: ![](data:image/png;base64, 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) --- HTTP POST data: ![](data:image/png;base64, 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) --- Research's Comment: ![](data:image/png;base64, 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) --- **Mirror:** [Click here to view the mirror](<http://1261780.openbounty.org/mirror/>) ### Coordinated Disclosure Timeline Vulnerability Reported:| 17 August, 2020 04:49 GMT ---|--- Vulnerability Verified:| 17 August, 2020 04:56 GMT Website Operator Notified:| 17 August, 2020 04:56 GMT a. Using the ISO 29147 guidelines| ![](/images/done.png) ---|--- b. Using publicly available security contacts| ![](/images/done.png) c. Using Open Bug Bounty notification framework| ![](/images/done.png) d. Using security contacts provided by the researcher| ![](/images/done.png) Public Report Published [without any technical details]:| 17 August, 2020 04:56 GMT Vulnerability Fixed:| 17 August, 2020 21:52 GMT ---|---