Lucene search

K
openbugbountySpam404OBB:128886
HistoryJan 23, 2016 - 10:28 a.m.

123go.cn XSS vulnerability

2016-01-2310:28:00
Spam404
www.openbugbounty.org
7
Vulnerable URL:
http://www.123go.cn/search_pro.asp?ShopName=%22%3E%3Csvg/onload=prompt%28/XSSPOSED/%29%3E
Details:
Description Value
Patched: Yes, at 26.07.2017
Latest check for patch: 26.07.2017 15:46 GMT
Vulnerability type: XSS
Vulnerability status: Publicly disclosed
Alexa Rank 5497375
Google Pagerank 3
VIP website status: No
Check 123go.cn SSL connection: (Grade: F)
Coordinated Disclosure Timeline:
Description Value
Vulnerability reported 23 January, 2016 10:28 GMT
Vulnerability existence verified and confirmed 23 January, 2016 10:31 GMT
Vulnerability details disclosed by researcher 16 April, 2016 11:11 GMT
Vulnerability patched by the website owner 26 July, 2017 15:46 GMT