logo
DATABASE RESOURCES PRICING ABOUT US

hitec-th.com Cross Site Scripting vulnerability OBB-1286711

Description

Following coordinated and responsible vulnerability disclosure guidelines of the **[ISO 29147](<https://www.iso.org/standard/45170.html>)** standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence. Affected Website:| **[hitec-th.com](<http://www.hitec-th.com>) ** ---|--- Open Bug Bounty Program:| **Create your bounty program now**. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| **[XSS (Cross Site Scripting)](<https://www.owasp.org/index.php/Cross-site_Scripting_\(XSS\)>)** / CWE-79 CVSSv3 Score:| 6.1 [CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N] Disclosure Standard:| Coordinated Disclosure based on **[ISO 29147](<https://www.iso.org/standard/45170.html>)** guidelines Discovered and Reported by:| **Broly157 ** Remediation Guide:| **[OWASP XSS Prevention Cheat Sheet](<https://github.com/OWASP/CheatSheetSeries/blob/master/cheatsheets/Cross_Site_Scripting_Prevention_Cheat_Sheet.md>)** Export Vulnerability Data:| Bugzilla Vulnerability Data JIRA Vulnerability Data [ Configuration ] Mantis Vulnerability Data Splunk Vulnerability Data XML Vulnerability Data [ XSD ] Vulnerable URL: ![](data:image/png;base64, iVBORw0KGgoAAAANSUhEUgAAAiEAAAA3CAIAAABVZQ1/AAAACXBIWXMAAA7EAAAOxAGVKw4bAAARl0lEQVR4nO2df0wT5xvAz1qgllL5UaoCKjhXjSGMGUeYQ8M00aVrTGWMOccmRoNICCNENscMY7ggQzAb24gxc3HGbPzhiCGGsKVjC2NMEVntOlY7hqWy2mlhgBUrFu77x/vdfe97d+/dtVCq7vn8de977/u8z/O87/Xh3rt7mEeSJAEAAAAAAUASbAUAAACARxaIMQAAAECggBgDAAAABAqIMQAAAECggBgDAAAABAqIMQAAAECgeCBiTFJS0pUrV3BFYA6Yoc9hygAA4CT4MeaXX36Znp5+4oknOIvAHDBDn8OUAQCAQyDGDA4ORkREcJ4aGxs7cuQIriielpaWbdu24YqBhsdA+im/reOELo1HgTljhj4P0JQNDg5GRUX50dHXyfJjCv7+++/du3fHxsbGx8e/+eab9+/ffxDmEQe/J+maU8f+Of9BdgIQLPy/jxkdHa2ursYVxRPcGMPD8uXLXS4XOvbbOk5mV9rMeTBjjN/MgXvz8vImJyeNRmN7e3tXV1dFRUVAh3tYoF8yAICQBnf4GzduWK3WzMxMzmLQCQsLC7YKAWeGPn/QpmwOuHv3bm9vr8ViCQ8PJwji2LFjO3fuLCgoCLZefiKVSjUaDeOYXukT/4ZLBvAJUfcxH374YVJSUkxMzKuvvjo2NkYQxNjYWGJiotvtnjdv3ueff04vHjt2LCIi4ujRo4sWLYqKitq1a9fdu3dxkltaWrZs2RISEsIobt++/ejRo6jyypUrYWFhaFyCIPbt2/f444/znC0rK+PvXlZWJmggQbvxZxhLEMS9e/f27NkTERGxfPnyd955Z2pqCnWZmpp66623Fi1aFB4e/uKLLw4PD7NNZkvDKUAHJ/nOnTv79u2LjY1dunTpu+++OzU1hdSur69PSkoKDw9/6aWXhoeHy8rKYmNjY2Jidu/efefOHdwUsO2iS4uKinrllVcY6lHdUUv2vKP6I0eOxMbGLlmy5OTJk5xqI2l//vnn1q1bIyIiVq1a9cUXXzAmgipS2zhst3C6ly4HtzLZU4Brv2DBguvXr6MAQxBEf39/XFwcfaBff/01Jibmhx9+QEXO1fLJJ59s3bqV6vL222/v2rVLcN1y+o3Tw5ye5CQ+Pv7y5cuM4/j4+IsXL6LKr7/+mqc7vQF9q03kIrxx48bzzz8fERGRlJRUX1/PuUF36dKlDRs2RERExMfHv/DCC7/99hunyWKuPsS1a9fCw8N//vlngiCGh4ejoqK+++47fhsBvxGOMW6322g0dnV1dXd3OxyOgwcPEgSxcOFCi8WiUCg8Hk9ubi69uH37drfb3d3d3dPT09PT09vbW1tbixOO2yjT6XQGgwFVnj9/fnp6uq2tDRUNBoNer+c5q9Vq+btrtVpBA+kwjCUIoqqqamJiwmQytbW1dXR0HD9+HLWsra01GAwGg8FqtcbFxfX19bFNZksTVIBHcnFxscPh6O3tbWtra2lpaWxspAR2dnYajUaHw7F69WqXy2UymS5cuGCz2crLy3FTwGmX2+02mUxIPbvdztMdN+9ut9tisZjN5lOnTmVkZODUJgiiqKhIqVT29fW1trby/zLi3MJ2Lx0eDTmnQHAlX7169cCBA3V1dVTN2NhYVlZWTU3Nhg0beLyq1+s7Ojpu375NuTErK0tw3eL8xvYwzpOxLASdnJeXt3nzZioO0bl06dLmzZvz8vLYp0QuwqKiotDQ0P7+foPBcPr0aU4FdDpdXl6e3W7v7OzMyMiQyWScJuOuEbbJSUlJ5eXlJSUlBEFUVFRotdpnn31W0A+An5C82Gw2giDGx8dRsaura8WKFdQphUJBb4mKqIvdbkf1zc3N69atQ8d2uz0xMZHq4na7FQrFyMgIu+hwOORyucfjIUkyLS2ttLR0586dSLhSqbTb7TxnJycn+btPTk76aiDDWJVK5Xa70bHRaExLS0PHarW6t7eX36VsyTgF6HBK9nq9CoViYGAAFVtaWtLT05HA0dFRVNnZ2SmRSCYmJij5K1eupCQwpoBtF0O9zs5Ounr07rh5R/XUEDi1Ub1MJqNLiIyMJLlWGqrHuYXRnl7PoyF7CnhWMmJoaGjFihVNTU30QbVabWFhIb0ZbrWkp6efPXuW6uvxePjXrcfj4fQbp4c5PYl0ZsB2FAO3211dXR0dHZ2Tk2O1WlGl1WrNycmJjo6urq6mrGP8CAguQqQnZRFdT4qRkRGpVIp8QsE2mcRffZwmT05Orl69urKyUqVSOZ1OQScAfiMcY3CXN0+MkclkVH1fX59arUbHXq/X4XBQp5qbmzdt2oQrpqamtre3O53OhISE0dFRtVrt9Xo//fTTrKwswbNiGvhkIP14ZGSEIAjVP0RHRyMDR0dHpVKp1+tl+FBFg18yQwEKnGSHwxEaGkoVrVbr4sWL+QUyinSfc9rFL43eHTfv7F98TrVRPUMCf4zBuYUnxojRkJLPs5IR6enpDQ0N9EHLy8slEslnn31GtcGtFpIka2pq8vLySJL8+OOPc3JyUCXPusX5jdPDnJ6cCSMjI3q9XiqVoqJUKtXr9VQUoTuBrRJuETIswum5Y8eO1NTU0tLSurq677//ni2fxC8GHtAtIzWDQICY02f+8+fPX7JkCVXkf6NMq9UaDIaBgQGdTrdw4cLU1NSOjg5qp4v/rJgGfuPxeCQSSU9Pj1T6X+9JJP/bcpw/fz6jvdFonOGIOMkzh+5zTrsmJydFdg8WgXCLGG7cuGEymX766SeqZmJiorm5uampqaioKCsra+HChQTvasnKykKbPOfPn6e2mwK3bhHszbFbt24J9vrjjz8qKio6OjqqqqpQTVVVVV1dXWFhYVVV1WOPPTYruuH48ssvL1++bDabHQ5HaWnp+vXrDxw4wNmSczHgTHY6nRKJxOl0zrrCwP/BH4L8u48haDsM586dY+wwILxer0qlom6TGUWSJLu6utLS0rZt29ba2kqSZGNjY3Fx8eLFi9GdEP9ZMQ18MpDRTKFQcN6Vq9Vqo9GIcybnoGLuY3CScXtlIu9j2D5n28UjjdEdN+/sPzlF7pWdO3cOjTU+Pi6RSOj7dfS9MrZbRO6V4TSk38fwrGSv10t3nc1mk0qlfX19JEnqdLqioiIer1IkJycbDIbIyEj6Th1u3eL8xulhTk+Sfu2VFRQUKBSK0tJSl8tFr3e5XCUlJQqFoqCggHKCT/cxSE+bzYbqOffKGBiNxoSEBM4pxl19nCaPjo4uXry4qakpOjoazRoQIPyPMW63WyqVUvuzVBFdmdnZ2UNDQ2azOTU1tbKykpJA7at2dHQkJydT9YwiQq1Wq9Vq1GVoaEipVKampoo8K9gA1YuMMQxjCwoK0tPT0R9WtbW1VVVVqL66ujotLc1kMg0NDRUVFXV0dHB6lS6N/2qk3IWTvHfv3m3bttntdrPZvHbt2oaGBvExhu1ztl080hjdcfPO+XPAVhvV6/V6ugRqrLS0tL179zqdTqvVmpGRQdVzuoUxWZQPRWrIiDG4lUyXzBBisVhkMpnJZMJ5lepVUVGRkpKi0+noYnnWLaffOD2M86Qf5ObmUmGAjc1my83NZThB/CLMzs7W6/U2m81sNqekpLD17Ovre+6559rb210ul91u37t3r06n4zRZ5NWHKCwsRPuT7733XmZmpqATAL/xP8aQJFlZWSmXy0+dOkUv1tfXKxSKmpoatVodGRn52muvUc/66NIOHDhQXl5OiWIUETt37szOzqaK69ato7fhP8vfQMzFwDhFN9bj8ZSUlCQkJMjlcq1WS78be+ONN1QqlUwm0+v1jL/76FDSRCqAk+x2u/Pz81UqVUJCQmVlpdfrFX95s33OtotHGqM7asmed86fA7baqH5oaGjLli0KhUKj0dTV1VFj9ff3b9q0SaFQrFmzpqGhgX4vxekWTveK1JAeY3ArmdOxdCHFxcUbN27EeZVqhvZRqSsIwbNuOf3G6WGcJwOKHzHG6XTqdDqFQpGYmFhTU8PWc3JysrKyUqPRhIaGqtXq3Nxcp9PJabL4q6+np0ehUKD7PI/Hk5iYePr06ZmZDmARiDF+gNupYKDRaC5cuIArAnPADH3O6C5y3oOIrxrOgUVut1smkzHej/rXYrFYGG9VAI8AQfvO/+rVqzxFYA6Yoc9hymbON998k5GR4V9atkcPo9G4YsWKYGsBzDLBz7v8qHLlypX9+/ej46mpqffff//3338PrkqcsHW7f//+yy+//NdffwVRq38DY2Nj6K3lYCsSTA4fPnzy5Mlbt25dvHixvLz84U3JA+CAGBMo8vLyEhMT0fH8+fOnp6dxL1wGF7ZuISEhoaGhD6a2jxLUY55gKxJMMjMzGxsbExIScnNzi4uLd+3aFWyNgNkm2Jt1jw4o3S86drlcEomE/t6R1+tdu3Yt/QFGW1ubUqmkP5lcv349ero7Pj5eXFy8bNkymUym0WhqamrQ011cPfnPS1AMPvjgA8YpqVSanJyMPk3n0a23txd93wcAADATIMbMGjxfveBAGajQcXNzc1xcHErLgV7otFgsN2/eNBgMmZmZ3d3dPPXUiJ7/h/7eEaq5efNmU1OTSqU6f/68SFsAAAD8BmLMrOFHjLFYLHK5fGBgwOv1ajQa9A7rxMSEVCplZOngqRcckX3q+PHjWq1WpC0AAAB+I/w8hj97PDvfOy4/PD0Rt/h875wt2fiUWF7QKJ5s5LiBeFLK87Bq1ar8/PyDBw+eOHFCqVSizejp6Wm0qcVojKv3g7S0NLPZLL69YHZ3AAAAToRjDC57PC7fOy4/PCMRt/h87+yWnPnJxSeW5zFKTDZyzoH4U8rzUFFR0d7eXl5e3tDQgGrCw8O1Wu2OHTt+/PFH+v96wdX7QXR09Pj4uPj2PNndAQAA+OC/zeHJHo/L947LD0//0Ixdw5OLiWAl8WYnILKJTizPb5RgNnLcQKRfe2WIHTt2LFu2jF4zPj5+8OBBjUYjlUpXrlxJfdGNq6cUo+d4plJmsZXBZUWjN6B34czuDgAAIIhAjPE1e7yY/PCkL/neRf5Y20QnlvfDKHoRNxDpb4wxmUyRkZHJycnHjx9nn/V4PF1dXenp6YcOHeKvt9lscrmcHnepyDrzGINgZHcHAAAQZJa/8/cjP7wfsJN19/T0zO4Qc0ZxcXFpaenGjRuzs7NzcnIYn3yHhYU9/fTTDQ0Nubm5hw8f5q+XSCTx8fFiBh0ZGVEqlT7pyc7uDgAAIIhAjFGr1aGhodeuXUtKSiIIwmKxUN8VcrJkyRK5XD4yMvLkk09SlYODg4J6+DQQ+z+yeL1ej8dz/fr1pUuXEgRhtVqXLVs2W0YxED+QIF999dXAwEBra+uCBQsyMjIqKio++ugjgiDu3LlD/bt4NKLX6+Wp95Xu7u7k5GTx7ffv33/mzJn8/Hyr1RoTE+PHiAAA/EsRvNPxNXu8YH540pd87+L3ygjRieX9MEpMvnd6Snm73U7fUuNkYmIiMTHxzJkzqGi1WuVyuclkQpkBT5w44XA4RkdHUQr96upqXD3dpYLfx7hcLjHfx/T399PN58/uDgAAgEM4xviaPV4wPzzpS7538TFGfGJ5P4wSme+dSinv8XhkMhn/4/GqqirqX7sjSkpK0L+yaG1tzczMVCqVcrk8JSXlxIkTqAGunvTlO/81a9YwvvNnc/bs2ZSUFP42AAAAgswjSXJO7pcCy+DgYHJy8u3btx+cgV5//XWz2fztt98GWqVZ5969e6tXrz506NCePXuCrQsAAA83Qcvt/8hTV1fHfm70UBAWFnbmzJlnnnkm2IoAAPDQA3mXA0VISMhTTz0VbC38BAIMAACzAsQYAAAAIFA8Is9jAAAAgAcQuI8BAAAAAgXEGAAAACBQQIwBAAAAAgXEGAAAACBQQIwBAAAAAgXEGAAAACBQQIwBAAAAAgXEGAAAACBQQIwBAAAAAgXEGAAAACBQQIwBAAAAAgXEGAAAACBQQIwBAAAAAgXEGAAAACBQQIwBAAAAAsV/ABayZZNxcYKcAAAAAElFTkSuQmCC) --- Research's Comment: ![](data:image/png;base64, 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) --- **Screenshot:** ![hitec-th.com vulnerability](/twimages/screen-1286711.jpg) **Mirror:** [Click here to view the mirror](<http://1286711.openbounty.org/mirror/>) ### Coordinated Disclosure Timeline Vulnerability Reported:| 30 August, 2020 12:57 GMT ---|--- Vulnerability Verified:| 30 August, 2020 13:12 GMT Website Operator Notified:| 30 August, 2020 13:12 GMT a. Using the ISO 29147 guidelines| ![](/images/done.png) ---|--- b. Using publicly available security contacts| ![](/images/done.png) c. Using Open Bug Bounty notification framework| ![](/images/done.png) d. Using security contacts provided by the researcher| ![](/images/done.png) Public Report Published [without any technical details]:| 30 August, 2020 13:12 GMT Vulnerability Fixed:| 1 September, 2020 04:48 GMT ---|---