Lucene search

K
openbugbountyBroly157OBB:1295865
HistorySep 02, 2020 - 12:31 p.m.

artistup.fr Cross Site Scripting vulnerability OBB-1295865

2020-09-0212:31:00
Broly157
www.openbugbounty.org
8

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:

&nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence;
&nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence.

Affected Website: artistup.fr
Open Bug Bounty Program: Create your bounty program now. It’s open and free.
Vulnerable Application: Custom Code
Vulnerability Type: XSS (Cross Site Scripting) / CWE-79
CVSSv3 Score: 6.1 [CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N]
Disclosure Standard: Coordinated Disclosure based on ISO 29147 guidelines
Discovered and Reported by: Broly157
Remediation Guide: OWASP XSS Prevention Cheat Sheet
Export Vulnerability Data: Bugzilla Vulnerability Data
JIRA Vulnerability Data [ Configuration ]
Mantis Vulnerability Data
Splunk Vulnerability Data
XML Vulnerability Data [ XSD ]

Vulnerable URL:

![](data:image/png;base64, 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)

Research’s Comment:

![](data:image/png;base64, iVBORw0KGgoAAAANSUhEUgAAAiEAAAA3CAIAAABVZQ1/AAAACXBIWXMAAA7EAAAOxAGVKw4bAAAPiUlEQVR4nO3df0wT5/8A8LNWKLUUkFIFUX7MASGGGUdI2QoyQ4bpGOsQGWFMzEbQGKasYYQVxhhuijiN6yohhC1KFrcRZYQQ0xHGFqaMICJjlVVmEGotDAEBCysN0M8fT3bf+17vrleggNv79Vfv4bnn3s/77slD79qn66xWKwYAAAA4AWe1AwAAAPCvBXMMAAAAZ4E5BgAAgLPAHAMAAMBZYI4BAADgLDDHAAAAcBaYYwAAADgLzDEAAACcxYE5ZnBw0N3dfXGHmZycPHXq1OL2XRbEAJbSEUrL3qDdo7A5ot06iwh7cHBw3bp1v//+O6n8u+++8/LycrQpyu4sIqr33nvPzc3t0qVLiz4ReAuL2HfpBgcHHc3esgeA8kZK4HJd2Ks+/MEqWqH3MRMTEydPnlyZY63NAJZXQEDA6OjoajVy7tw5Usn58+dX7OgkY2NjKpWqvb09IyNjcW0SW1h6PE+j5ToXdP5low84BO6VPa1cXV1XpREul1tbWzs0NISX/Prrr93d3StzdFsmk4nP5z/33HPr169fXJukFv6bluVcAGBrMXOM7Rtq/J3+zZs3Y2Ji3N3dt27dun///j/++APDsMnJycDAQJPJtG7dOtLtiOnp6cOHD/v4+Gzbtu3jjz+en5/H2z9z5szmzZu9vLwyMzP//vtvVH92dvadd95xd3cPCAj46KOP5ufnUeWzZ88GBQV5eXm9+eabk5OTpIApA/j888+DgoK8vb3feustfBfb9klN3bx5Mzo62s3NzcfH58CBAw8fPsT/dPr0aduAKTv4xhtvfPrpp/iO0dHRly5dsntoylPApvsYht25c8fb2/uXX36hbIR9OxiG8Xi8xMREtVqNl5w/fz49PR3fpOzyuv8PY30fhiHhGIaNjY0RzywpLadOnfLx8fH19f3yyy8xmpNLaoEy+Pv372/cuPH27duovpeX108//WQ3TuaUPnz4MCEhwd3dPTQ09PLly6TWLly4kJCQgG8WFhZmZmbS5ZZhPCKvv/76mTNn0OvffvvN1dUVj+Tw4cPvv/++o/fEhoaGXnnlFXd396CgoLNnz+KHo8www/CnPLnsL0XwVFjm9zGJiYmHDh3S6/XXr1+XSqU8Hg/DMA8PD51OJxAIzGYz6XbEsWPHjEZjV1eXRqNpaGioqKhA5SaTqaOjo7Ozs7Ozs6urq7y8HJWXlpbOzMz09PRoNJrW1tbKykpUuaenp62traOjQ6/XK5VKUlS2AZhMpu7ubrSL0WgsKChgaJ+oq6srOzt7eHhYq9X6+/vn5OTgAXf+gxgwZQdTU1Pr6+tRhaGhoe7ubrlcbvfQdOx2f3JyMjk5uaysLCYmZint4PLy8iorK9E8+uDBA41Gc/ToUfyvlF02/yM/Pz8tLY1l1zD6hCPe3t50l5bJZNLpdFqt9uLFi1KpFKM5uaQWKIMPCgpSKpW5ubkYhhUXF8tkspdeeolNnAwpzcnJEQqFvb29165ds51j5HJ5a2vrkydP0GZDQ0NycjJdbu1KTExsbm5GrxsbGxcWFjQaDdpsbm6WyWRsGiHKyclxcXG5d+9ec3NzTU0NXk6ZYYbhzzCaWF6K4ClgZW1gYEAgEBBf4OWenp5Wq3V8fJzL5ZrNZoZ9iebm5gQCQX9/P9psaGiQSCSoMoZher0eldfV1UVGRqLXIpHIZDKh193d3VFRUajy1NQUKrx+/XpwcDBzAKRd2tra8F1s22dIyL1797Zs2cIQMF0HZ2ZmhEIhql9RUZGUlMTm0KQu4OeCrvt4HZlMdvToUYdyYjeNsbGxarXaarXm5+dnZ2fj1wBdlxGtVrt9+/bR0VG67lhpLhVSwlmmZXx8nFiTLsP4XgzBWyyWsLCwkpISkUg0PDxMGR4pToaUzs3N8Xg84gWDskckkUiuXLmCh2c2mxnGC+V4xBmNRj6fjwZmVFSUQqFIT09HNYVCocViYRjalMOWx+PhYRCDt5thu0mzsr4UwdOCu4zTlZeXV0pKikQi2bt3r5+fX2Rk5J49exjqj4yMWCyWoKAgtBkWFoYuLwzDeDzetm3b8HK9Xo9h2OPHj0dHRwMDA1H5wsICl8vFMEwgEODv9P39/cfHx+2GStzFz88P7ULXPtHt27fz8/N7e3stFsvCwsLCwgJDwHQddHNzk8lk9fX17777bl1d3aFDh9gcmk1fbLtfWFio0Wiqq6uX2A5JXl6eQqE4ePBgdXV1W1sbXs5wTjEMy87OVqlU3t7erDqGYRh9wtl0h3jLiE2GGYLfsGGDWq2Oj49XqVSbN29mGSddSkdGRjAMI14wtg3K5fLGxsb9+/c3NjbKZDJXV9ehoSGG3DLw9fUNCQlpa2sLDw83Go3FxcUhISHz8/PNzc3x8fEbNmxg0whuZGRkYWGBGAZ6sYhrmO7kLmJEgzXLgTnGYrHYvWi++eabW7duabVao9GoUCheeOGFL774YmkR/h+z2czhcDo7O/EwOByOxWJxavukOnK5PCsrq7KyksfjGQyGffv2Le5YqamparU6IyOjo6Ojrq7OZDLZPfQizMzM1NXVffvttzk5OcnJyR4eHktvE3n11Vfz8/NTU1MlEkloaOjg4KDdXS5cuBAcHPzaa685dKDlSjibk8tseHiYw+EMDw87NU5ccnIyusXX2Nh46NChJbYmk8mam5v7+/sTExM9PDx27drV2tq6uBtldBaR4WVPGliDHBhmvb29wcHBGIZt2rRpZmYGv1lsMBiI1Z5//vnMzMwPPvjgq6++wp86UBKLxS4uLvfv30ebOp0O/yfIbDY/ePAAve7r69u+fTuGYb6+vnw+f3x8fOs/fH192cdvl932Hz16ZDQaP/zww2eeeWbr1q3oaRNDwAwdlMlk3d3dNTU18fHx7u7uTuoah8Opq6s7cOBAVFRUUVHR0hskUigUGo1GoVAQC+m6/PDhQ7VarVKpHDoEQ8IdxSbDDOdrcnIyLy/v8uXLlZWV6JMsS4lTLBZjGEa8YGzrPPvss2Kx+Mcff2xvb0czAV14zOMRQY9kGhoakpKSMAyTy+X19fU///zzIuYYsVjM4XDw/yp0Oh164eg1vIwnF6xpzLfSmpqaqqurR0dHOzo6wsLCKisrUXlUVFRWVtbw8HBfX59UKkU3ZHt7e/ft29fS0jI6OqrX67OyshITE1F9k8nE5XL7+vpI7WdlZSUlJen1eq1Wu3v3bpVKZf3nhmxKSorBYNBqtbt27SopKUH1jxw5IpFI0Puk8vLy0tJSuzejbQNg2MW2fVI7YrG4oqJiYmKir69PLpejHRkCpuwgkp6eLhQKa2trWR56amqKy+XqdLq5uTm7z8ZIf9LpdDwer6enh9ggw1MQujQSq5nN5paWFtv6lF1OTk6+cuUK/uSf1BSxa8TXdAm32wvKBwB0GSZWpjtfR48eTU1NtVqtn3zySVxcnG1mbONkTqlcLideMJTZLi4ujoiIwAcRQ3iU49E2QrFYjJJvMBiEQuGuXbtIGSAln7SJS0lJkcvlAwMDWq02IiLC7vChG/50o4nNpQieFnbmmPb2dqlUKhAIduzYce7cObz83r17e/fuFQgE4eHhKpUKXQQWi6WkpCQkJMTFxUUsFmdkZBCfjpaUlPD5/IsXLxLbN5lM2dnZIpHI39+/pKQEXcroIisrKxOLxZ6engcPHpyZmUH1zWZzbm6uv78/n8+XyWT9/f3sr0g8AIZdbNsnNdLa2hoZGcnj8bZs2aJQKIijory83DZgyg4i9fX1AoGAoWu2XSgoKCB1geUcY7Vajx07FhsbS2xtiXMMqRyvT9ll2/9sSE3hXSO9pky43V5QxkmXYWJlyuA7OzsFAgF6RG82mwMDA2tqakiN28bJnFKDwfDyyy8LBIKQkJDPPvuMMtvoW0fEIUN3OVGOR5L09PSUlBR8MzIyUqlU2maAmHzbTWR4eDgxMVEgEAQGBpaVlbEZPpTDn2E00eUNPHXWWW3G/6obHBzcuXMn/t4fgP+m6elpkUhkNBpXd6UZZnfv3o2Njf3rr79WOxCwRsH3/AFYo5qamqRS6VqeYDAM6+7uRo9pAaC0nJ9dBgAsl8nJSbVa7dD3VVfMiRMn/Pz8kpKS+vv7lUplcXHxakcE1i54HwPAWoQ/21vtQCjExcVVVFT4+/ujlRHQOjcAULIzx/zwww8eHh5jY2N4yYsvvlhYWIhh2JMnT44fPx4QEODm5hYaGnr69Gm0PBFdOXsBAQFLfBiDlqBH1q9fHxQUdOLECUfDAGAVzc7OXr16dW0uVRkTE3Pr1q3Z2dk///zz+PHjqx0OWNPszDEJCQlSqbS0tBRtfv/99wMDA2j5oLfffluv1zc1Nen1+oqKCo1G09XVxVC+wtDyG2az2WQy1dfXNzY2wuriAACwwux/ruzu3bu7d+9GK02Fh4crlUq0rrBQKBwdHSV9dZyufIXZfjLtxo0b2dnZd+7cWcWoAADgv8b+85jQ0NDs7OyCgoKqqiqhUIjuvaKVhWyXlqErJ2JYut+hpf7tLmlOxOPx5ubm7HYWAADAMmL1zL+4uLilpUWpVOJrgWzcuFEmk6Wlpd24cWN6ehqvSVdOQrd0v6NL/bP06NGjoqIiuVzu0F4AAACWiuV3NdPS0rZv304smZqaKigoCAkJ4XK5O3bswL91TFeOc3QlfLr6zF9xxzBMJBKJRKJNmzbxeLwjR45Q/ugAAAAA52E1x/T09Hh6eu7cuRNfr4zIbDa3tbVJJJKioiI25QMDAzweD9/s7e0Vi8VWq9VoNLq4uODlfX19+O9JUNZnnmP4fL7BYDAYDEajkTTJAQAAWBms7pUdO3ZMoVCo1eqioqLHjx+T/urq6hodHa1SqWpra9mUrwwOh4Mv/vpf/p12AABYRfbnmKtXr/b39+fl5e3Zs0cqleLf6SU9bkG/08dQTip0aCV8yvpsljQHAACwmpjf5szMzAQGBn799ddos6+vj8/n9/T06HQ6sVhcVVVlNBonJiZaW1t37tx58uRJunJim46uhM9Qn25Jcza/7QoAAMDZ7MwxpaWlpB+Wz83NRb+fce3atbi4OKFQyOfzIyIiqqqqUAW6chzD0v2OLvVPt6Q5zDEAALAWrMLa/o4u3Q9L/QMAwFMK1sQEAADgLDDHAAAAcBaYYwAAADjLWvytZQAAAP8O8D4GAACAs8AcAwAAwFlgjgEAAOAsMMcAAABwFphjAAAAOAvMMQAAAJwF5hgAAADOAnMMAAAAZ4E5BgAAgLPAHAMAAMBZYI4BAADgLDDHAAAAcBaYYwAAADgLzDEAAACcBeYYAAAAzvI/o8+7YD6ZnkoAAAAASUVORK5CYII=)

Screenshot: artistup.fr  vulnerability

Mirror: Click here to view the mirror

Coordinated Disclosure Timeline

Vulnerability Reported: 2 September, 2020 12:31 GMT
Vulnerability Verified: 2 September, 2020 12:44 GMT
Website Operator Notified: 2 September, 2020 12:44 GMT
a. Using the ISO 29147 guidelines
b. Using publicly available security contacts
c. Using Open Bug Bounty notification framework
d. Using security contacts provided by the researcher
Public Report Published
[without any technical details]: 2 September, 2020 12:44 GMT
Vulnerability Fixed: 3 September, 2020 19:55 GMT