logo
DATABASE RESOURCES PRICING ABOUT US

tierheimleben-in-not.xobor.de Cross Site Scripting vulnerability OBB-1333017

Description

Following coordinated and responsible vulnerability disclosure guidelines of the **[ISO 29147](<https://www.iso.org/standard/45170.html>)** standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence. Affected Website:| **[tierheimleben-in-not.xobor.de](<http://tierheimleben-in-not.xobor.de>) ** ---|--- Open Bug Bounty Program:| **Create your bounty program now**. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| **[XSS (Cross Site Scripting)](<https://www.owasp.org/index.php/Cross-site_Scripting_\(XSS\)>)** / CWE-79 CVSSv3 Score:| 6.1 [CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N] Disclosure Standard:| Coordinated Disclosure based on **[ISO 29147](<https://www.iso.org/standard/45170.html>)** guidelines Discovered and Reported by:| **devl00p ** Remediation Guide:| **[OWASP XSS Prevention Cheat Sheet](<https://github.com/OWASP/CheatSheetSeries/blob/master/cheatsheets/Cross_Site_Scripting_Prevention_Cheat_Sheet.md>)** Export Vulnerability Data:| Bugzilla Vulnerability Data JIRA Vulnerability Data [ Configuration ] Mantis Vulnerability Data Splunk Vulnerability Data XML Vulnerability Data [ XSD ] Vulnerable URL: ![](data:image/png;base64, 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) --- Research's Comment: ![](data:image/png;base64, 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) --- **Mirror:** [Click here to view the mirror](<http://1333017.openbounty.org/mirror/>) ### Coordinated Disclosure Timeline Vulnerability Reported:| 13 September, 2020 15:47 GMT ---|--- Vulnerability Verified:| 14 September, 2020 07:35 GMT Website Operator Notified:| 14 September, 2020 07:35 GMT a. Using the ISO 29147 guidelines| ![](/images/done.png) ---|--- b. Using publicly available security contacts| ![](/images/done.png) c. Using Open Bug Bounty notification framework| ![](/images/done.png) d. Using security contacts provided by the researcher| ![](/images/done.png) Public Report Published [without any technical details]:| 14 September, 2020 07:35 GMT Vulnerability Fixed:| 17 September, 2020 12:21 GMT ---|---