logo
DATABASE RESOURCES PRICING ABOUT US

hida.keizai.biz Cross Site Scripting vulnerability OBB-1335799

Description

Following coordinated and responsible vulnerability disclosure guidelines of the **[ISO 29147](<https://www.iso.org/standard/45170.html>)** standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence. Affected Website:| **[hida.keizai.biz](<https://hida.keizai.biz>) ** ---|--- Open Bug Bounty Program:| **Create your bounty program now**. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| **[XSS (Cross Site Scripting)](<https://www.owasp.org/index.php/Cross-site_Scripting_\(XSS\)>)** / CWE-79 CVSSv3 Score:| 6.1 [CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N] Disclosure Standard:| Coordinated Disclosure based on **[ISO 29147](<https://www.iso.org/standard/45170.html>)** guidelines Discovered and Reported by:| **Broly157 ** Remediation Guide:| **[OWASP XSS Prevention Cheat Sheet](<https://github.com/OWASP/CheatSheetSeries/blob/master/cheatsheets/Cross_Site_Scripting_Prevention_Cheat_Sheet.md>)** Export Vulnerability Data:| Bugzilla Vulnerability Data JIRA Vulnerability Data [ Configuration ] Mantis Vulnerability Data Splunk Vulnerability Data XML Vulnerability Data [ XSD ] Vulnerable URL: ![](data:image/png;base64, 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) --- Research's Comment: ![](data:image/png;base64, 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) --- **Screenshot:** ![hida.keizai.biz vulnerability](/twimages/screen-1335799.jpg) **Mirror:** [Click here to view the mirror](<http://1335799.openbounty.org/mirror/>) ### Coordinated Disclosure Timeline Vulnerability Reported:| 14 September, 2020 13:31 GMT ---|--- Vulnerability Verified:| 14 September, 2020 13:46 GMT Website Operator Notified:| 14 September, 2020 13:46 GMT a. Using the ISO 29147 guidelines| ![](/images/done.png) ---|--- b. Using publicly available security contacts| ![](/images/done.png) c. Using Open Bug Bounty notification framework| ![](/images/done.png) d. Using security contacts provided by the researcher| ![](/images/done.png) Public Report Published [without any technical details]:| 14 September, 2020 13:46 GMT Vulnerability Fixed:| 15 September, 2020 06:14 GMT ---|---