Lucene search

K
openbugbountyDevl00pOBB:1364875
HistorySep 26, 2020 - 7:35 a.m.

mcc-unitec.com Cross Site Scripting vulnerability OBB-1364875

2020-09-2607:35:00
devl00p
www.openbugbounty.org
10

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:

&nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence;
&nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence.

Affected Website: mcc-unitec.com
Open Bug Bounty Program: Create your bounty program now. It’s open and free.
Vulnerable Application: Custom Code
Vulnerability Type: XSS (Cross Site Scripting) / CWE-79
CVSSv3 Score: 6.1 [CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N]
Disclosure Standard: Coordinated Disclosure based on ISO 29147 guidelines
Discovered and Reported by: devl00p
Remediation Guide: OWASP XSS Prevention Cheat Sheet
Export Vulnerability Data: Bugzilla Vulnerability Data
JIRA Vulnerability Data [ Configuration ]
Mantis Vulnerability Data
Splunk Vulnerability Data
XML Vulnerability Data [ XSD ]

Vulnerable URL:

![](data:image/png;base64, iVBORw0KGgoAAAANSUhEUgAAAiEAAAAjCAIAAADNIk3yAAAACXBIWXMAAA7EAAAOxAGVKw4bAAAJaUlEQVR4nO3cXUhT4R8H8NNmNvUs3dymzpmbhUgXFTTEwki8iF6GGCVFrSwKgzAZo0SFaiWkKQa9YN4U1k13EqMLCSGwMURtLV/nC+amTvNluZo2x17+F4f//ofzMk9z+7vZ73N1nrNznud3vudpT55jbfP5fAgAAAAQBqzNLgAAAMCWBWsMAACAcIE1BgAAQLjAGgMAACBcYI0BAAAQLrDGAAAACJfIXWNkMtm3b9/ommAjoj3MaK8fgH9HhK4x/f39Xq93//79lE2wEdEeZrTXD8A/ZZ01xmw2c7lcyo/sdntdXR1dc4O0Wm1RURFdM9IQUgptFCEXXJgBZkKATwOfFZxQTYYQ1obvKiTdhiM3ADZF8D/HLC8vP3r0iK65QdG1xmRmZi4uLvqboY0i5IILk3CNYT0rsAicDCG/zHDkBsCmiMRnZbOzs6OjowUFBZTNyLRjx47NLoGRjYQZ3DWGNpmInQwhnwDRMqMACIzRGvP06VOZTJacnHzp0iW73Y4giN1ul0qlDodj27Ztb968wTefPHnC5XIbGxtTUlJ4PF5paemfP3+wfnp6eo4cOcLlctPT08+cOTM8PEw5nFarPXbs2Pbt2wlN7AFCU1OTTCZLSEg4d+7c0tLSnTt3hEJhcnLy1atXV1ZWsFM8Hk91dXVKSkpCQkJJScnS0lLg/XiExxRms5nH4+E/wgrg8XgXL17E0sCfQkhmbW3t2rVrXC43MzPz/v37Ho+HYSV0B6ysrNy4cUMoFGZkZDx48MDj8TCPhZwt5Sizs7OnTp3icrkymaypqQm7fCZPbx4/fky46f6z6KKjQzdV8PVjfVLONHLs2MF1dXVCoTAtLe3Vq1fkm84ww56enkOHDsXFxQmFwpKSkpmZGYaPtkKbNgBRYf01xuFwGI1GvV7f3d1ttVqrqqoQBElMTDSZTCiKOp1OpVKJb54+fdrhcHR3d/f29vb29hoMhoaGBqwrhUJx5coVi8Wi0+ny8/M5HA7liAEelGHF6HQ6o9FotVpzcnIWFxf7+vq6uromJydramqwwxoaGjo6Ojo6OkZHR8Vi8dDQUOD9zDkcjr6+PiwNi8XiH9GPkMzDhw9XV1f7+vra29s7OztbWloYVkJ3QEVFhdVqNRgM7e3tWq22ubmZeSzkbClHKS8vj42NHR8f7+joePv2LfNkev8Lf9OZR4dHN1UI9dPNNMrYHQ6HyWQaGBhobW3Nz88nl8cwQ4PBUFZWNjc3NzAwIJFIysvLGUYUwrQBiBq+gCYnJxEE+fXrF9bU6/VZWVn+j1AUxR+JNbFTLBYLtr+trU0ul/t8PpvNFhMT43Q6yaNYLBapVIptOxwOFEVtNhu5ifW8vLyMfaTT6Vgs1urqqr+2PXv2YNsikchgMJAHottPuGTCdSUlJVGmodPpsDToovD5fAKBwOFwYNtGozE3N5dhJZQHuN1uFEUnJiawplarzcvLYx4LIVvKUdxuN4fD8Q/R1taGXT7hGgnobjphVpCjo0Q3VQj10w3qo4odOxh/7fgrYp4hwfj4eGpqKqEruqBClTYAUSRm3UUIRVH/j+1isdhms617CofDycjIwLZzcnIsFguCIDwe7+zZs3l5eYWFhWKxWC6XHz161N+tXq/Htj9+/Jibm+t/PEVooiiamJiIbUskkp07d8bFxfk7wV6T2u12m822b98+QlV0+4VCoX97YWGBeRoSiSRwGj9//lxcXJRKpVjT6/XGxMQEqGTdUufn510ul0wmw5o5OTnYlyOTWBBSmJSjzM/Pe71e/BDk8igTo7zpeAGiI3RIN1UI9dMNShc7iqL4c8nlMckQQZCvX79WVlYODQ25XC6v1+v1eun6xAs6bQCi2vprTAi9e/fuy5cvAwMDVqtVrVYfPnz4+fPnCIKw2ey0tDTsmFD9RhmbzWa432g0BtE/E06nk8Vi9fb2Yt9xCIKwWP97OElXIfMD/hZlmEGMEvLEyB1SThWGk4EydpfLFapqi4uLr1+/3tLSwuFwpqenjx8/zvzckN9TACJcWH6vzOl0Tk1NYdujo6O7du3yf3Tw4MHS0tLq6urXr1+/f/+ecKLH4/nw4YP/e4TQZCgxMZHP55P/HTjd/nQcBEH4fP7q6urv37+xT6enp/9qdLy0tLT4+HibzebvH1tK6SpZt1SRSBQbG/v9+3esaTKZ/H9bXxc5TMpRRCIRi8Uym83+IchdERLDBLjp66LskDBVKCcD5aB0sYfEwsKC1Wq9e/fu7t2709PT6d4pkgWdNgBRLfg1RiAQOJ3OsbExyqZarZ6ZmRkcHNRoNAqFAkGQ4eHhEydOfPr0aWlpaWpq6sWLFwcOHPD3tra2hiCIXq9PTU31PzogNJlTqVRlZWX9/f0zMzO3bt36/Plz4P14XC5XLper1eofP36MjY1hv+PwV/BRKJXKmzdvDg4Ozs7ONjY21tbWBqgECyHAAWw2+/z58yqVampqCsv2woULDKuiDJM8CpvNVigUKpXKbDZjQzC/cPJNDw7lVKGbDJSD0sWOx+fznU7nyMiI/5f9mBAKhXw+/+XLl3a7fWxsjJwPodvA93QjaQMQHQK/rgnwAtzn82k0mvj4+NbWVnyzqakJRdH6+nqRSJSUlHT58mXs3anL5dJoNNnZ2bGxsSKRSKlUzs3NEUa5fft2TU2Nv39CM3Ax+Kbb7a6srBQIBBwOp7i4eHFxMfB+gvHx8cLCQhRF9+7d++zZM/w7f8oCyG9o/ck4nU6VSiWRSOLj40+ePOl/u0uuhNAJXakOh6OsrEwgEEgkEo1G43a7GcZCCDPAKHNzcwqFAkVRqVRaX1/P8J0/iqINDQ2Em45/5x+gSALKqUKuH+uTPNN8Ph85dsr6q6qqsNvEfGr5fL7Ozk65XM7hcFJTU9VqdVJSEuF0um5DlTYAUWSdNSYIG/njkZ2d3dXVRdcEGxFcmCaTSSQShaOev0Wuf+t9EUdO2gCEyv/1nf+6RkZGAjTBRgQXptFozMrKCnkxQfgXJkPkpA1AqETWGgMiQW1trVgsLioqmpiYqKmpuXfv3mZXtJVB2mBri8T/rwxsroKCgubmZolEolQqKyoqSktLN7uirQzSBlvbNp/Pt9k1AAAA2Jrg5xgAAADhAmsMAACAcIE1BgAAQLjAGgMAACBcYI0BAAAQLrDGAAAACBdYYwAAAIQLrDEAAADCBdYYAAAA4QJrDAAAgHD5D0+/hx/zTv/nAAAAAElFTkSuQmCC)

HTTP POST data:

![](data:image/png;base64, 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)

Research’s Comment:

![](data:image/png;base64, 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)

Screenshot: mcc-unitec.com  vulnerability

Mirror: Click here to view the mirror

Coordinated Disclosure Timeline

Vulnerability Reported: 26 September, 2020 07:35 GMT
Vulnerability Verified: 26 September, 2020 07:47 GMT
Website Operator Notified: 26 September, 2020 07:47 GMT
a. Using the ISO 29147 guidelines
b. Using publicly available security contacts
c. Using Open Bug Bounty notification framework
d. Using security contacts provided by the researcher
Public Report Published
[without any technical details]: 26 September, 2020 07:47 GMT
Vulnerability Fixed: 9 October, 2020 10:19 GMT