logo
DATABASE RESOURCES PRICING ABOUT US

web.kansya.jp.net Cross Site Scripting vulnerability OBB-1349841

Description

Following coordinated and responsible vulnerability disclosure guidelines of the **[ISO 29147](<https://www.iso.org/standard/45170.html>)** standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence. Affected Website:| **[web.kansya.jp.net](<http://web.kansya.jp.net>) ** ---|--- Open Bug Bounty Program:| **Create your bounty program now**. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| **[XSS (Cross Site Scripting)](<https://www.owasp.org/index.php/Cross-site_Scripting_\(XSS\)>)** / CWE-79 CVSSv3 Score:| 6.1 [CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N] Disclosure Standard:| Coordinated Disclosure based on **[ISO 29147](<https://www.iso.org/standard/45170.html>)** guidelines Discovered and Reported by:| **Broly157 ** Remediation Guide:| **[OWASP XSS Prevention Cheat Sheet](<https://github.com/OWASP/CheatSheetSeries/blob/master/cheatsheets/Cross_Site_Scripting_Prevention_Cheat_Sheet.md>)** Export Vulnerability Data:| Bugzilla Vulnerability Data JIRA Vulnerability Data [ Configuration ] Mantis Vulnerability Data Splunk Vulnerability Data XML Vulnerability Data [ XSD ] Vulnerable URL: ![](data:image/png;base64, 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) --- Research's Comment: ![](data:image/png;base64, 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) --- **Screenshot:** ![web.kansya.jp.net vulnerability](/twimages/screen-1349841.jpg) **Mirror:** [Click here to view the mirror](<http://1349841.openbounty.org/mirror/>) ### Coordinated Disclosure Timeline Vulnerability Reported:| 20 September, 2020 12:45 GMT ---|--- Vulnerability Verified:| 20 September, 2020 12:50 GMT Website Operator Notified:| 20 September, 2020 12:50 GMT a. Using the ISO 29147 guidelines| ![](/images/done.png) ---|--- b. Using publicly available security contacts| ![](/images/done.png) c. Using Open Bug Bounty notification framework| ![](/images/done.png) d. Using security contacts provided by the researcher| ![](/images/done.png) Public Report Published [without any technical details]:| 20 September, 2020 12:50 GMT Vulnerability Fixed:| 21 September, 2020 04:14 GMT ---|---