Lucene search

K
openbugbountyDim0kOBB:135886
HistoryFeb 18, 2016 - 2:00 p.m.

mypoints.com XSS vulnerability

2016-02-1814:00:00
dim0k
www.openbugbounty.org
6
Vulnerable URL:
https://www.mypoints.com/emp/u/signup.do
Details:
Description Value
Patched: Yes, at 28.12.2016
Latest check for patch: 28.12.2016 13:30 GMT
Vulnerability type: XSS
Vulnerability status: Publicly disclosed
Alexa Rank 4120
Google Pagerank 6
VIP website status: Yes
Check mypoints.com SSL connection: (Grade: A+)
Coordinated Disclosure Timeline:
Description Value
Vulnerability submitted via Open Bug Bounty 18 February, 2016 14:00 GMT
Generic security notifications sent to website owner 18 February, 2016 14:02 GMT
Notification sent to subscribers (without technical details) 18 February, 2016 18:17 GMT
Vulnerability details disclosed by researcher 12 May, 2016 14:11 GMT
Vulnerability patched by the website owner 29 December, 2016 03:44 GMT