Lucene search

K
openbugbountyImPRINCEOBB:1379558
HistoryOct 03, 2020 - 12:54 p.m.

mail.kult-art.net Cross Site Scripting vulnerability OBB-1379558

2020-10-0312:54:00
ImPRINCE
www.openbugbounty.org
9

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:

&nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence;
&nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence.

Affected Website: mail.kult-art.net
Open Bug Bounty Program: Create your bounty program now. It’s open and free.
Vulnerable Application: Custom Code
Vulnerability Type: XSS (Cross Site Scripting) / CWE-79
CVSSv3 Score: 6.1 [CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N]
Disclosure Standard: Coordinated Disclosure based on ISO 29147 guidelines
Discovered and Reported by: ImPRINCE
Remediation Guide: OWASP XSS Prevention Cheat Sheet
Export Vulnerability Data: Bugzilla Vulnerability Data
JIRA Vulnerability Data [ Configuration ]
Mantis Vulnerability Data
Splunk Vulnerability Data
XML Vulnerability Data [ XSD ]

Vulnerable URL:

![](data:image/png;base64, iVBORw0KGgoAAAANSUhEUgAAAiEAAAA3CAIAAABVZQ1/AAAACXBIWXMAAA7EAAAOxAGVKw4bAAAQ4klEQVR4nO3dfUxTVxsA8CsWKHCpUmhVqBPYgoYYNQtr1Kkz6hzpGlIZomOdohJFw5AQdfgx1zGHDMFsbmHGzESN2cxiGCOLYUtnlo4wBaylq6xWdFihMKwormIppff94+Q9uen9aIVWqHl+f/Xcnnvuc58LPfRc+nQKRVEEAAAAEARhEx0AAACAFxbMMQAAAIIF5hgAAADBAnMMAACAYIE5BgAAQLDAHAMAACBYJsUck5KS0t7eztUE4xSK+QzFmJ8bSA4IIRM/x/z1118ej2fhwoWsTTBOoZjPUIz5uYHkgNDiY465e/dubGws61ODg4NHjx7lavqvoaEhKyuLqzk2OGyu+HnOi39AbMznyxSooVjHGU8+nzVLYxiW9RA45ocPH27ZskUikSQlJX344YcjIyNjPlCgYr57925cXFxAxhybgPyCAPDcjP19zKNHjyoqKria/gvGHDNnzhy73T7OQfiN+XyDNxTrOJPwJcnn1cEx5+fnu1wug8Fw+fLl5ubmw4cPP68YJ69JeEEB4DHBa2W9vb0Wi2XlypWszfGIjIwc/yChLoD5DCyeq4Njfvr0qV6vP3XqVFJS0ty5c48fP37x4sXnGSSdQCBIS0ujP5gQk/aCAsDFrznmyy+/TElJiY+Pf//99wcHBwmCGBwcTE5OdjgcU6ZMOXv2LL15/Pjx2NjYY8eOzZgxIy4ubvPmzU+fPuUauaGhYe3ateHh4V5NtDRRU1OTkpISExOzYcOGBw8e7N27VyKRxMfHb9my5cmTJ2iX1tbWJUuWREVFSSSS9evX9/T0EM+4SHLjxo34+Pg//viDuSPXwojX6bMOyxPY0aNHJRLJrFmzTp8+zTUUPQNxcXHvvfceyjwyPDy8bdu22NjYOXPmfPzxx6Ojo6zj4HyuW7fu2LFjaGN7e3tkZCQebceOHXv37mUdE3X4/PPPvS6l/1eHNQ/8VwfHHBUVde/evZiYGLS9s7MzMTGRIIjR0dH9+/fPmDEjJiZm/fr1Dx48IAjiyZMnO3bskEgks2fP/uSTT3DwdKx9mFeENaqkpKRr166hB1evXkUbf/nlF66zwHCf1tbW5cuXx8bGJiUlvfPOO3///TdBEBs2bPjss89w5yVLlpw9e7a3t/ftt9+OjY1NSUmpqamh/wR6/b4AMPn5nmMcDofBYGhubm5pabHZbGVlZQRBTJs2zWw2kyTpdDrVajW9uW7dOofD0dLS0tbW1tbWptfrq6qquAbnWShDx21qajIYDDabbd68eXa73Wg0Xrlypaur68CBA6ibXq/fvn17X1+fyWSSyWRFRUXPdP6Dg4PZ2dmVlZXLly/3fy+v02ftwxWYw+Ewm80mk+nMmTPLli3jGcrhcBiNRpR5q9WKT5kgiPLy8qGhIaPR2NjYqNPpTp48yToOzqdSqdRqtWjjzz//7PF4GhsbUVOr1SoUCtYxUQxt/0e/lH5eHZ48cGFdC7p58+aePXuqq6sJgqiqqtJqtVqt1mKxJCYmdnR0EARRXFxss9n0en1jY2NDQ0NtbS1zZK4+XleEIAgJA2uo+fn5q1evRnMPU2tr6+rVq/Pz81FTqVTm5+dbrdampqZly5YJhUKCIHJzc+vr61GH3t5eg8GgUqmKiooiIiI6Ozu1Wu25c+d8JgeASY3i1dXVRRDE48ePUbO5uTk1NRU/RZIkvSdqol2sVivaXldXl5GRgR5brdbk5GS8i8PhIElyYGCA2USDPHr0CD3V1NQUFhY2NDSEw3jllVeY0XZ2ds6cOdMrGHqQzGgVCsWuXbuY23Fz+vTprONwjcyKHhhBEPiUeYbyynxTUxPOPEVRCQkJDocDPTYYDHK5nDkOPZ82my06OtrpdFIUJZfLS0tL8/Ly0C4ikcjlcrGOyXUpx3Z1cB7ocfLEjHV3d6empl64cAE1pVKpXq+nd3C73SRJ3rlzBzUbGhoWL17sNThPH+YV6WZgPR2Hw1FRUSEWi3Nzcy0WC95usVhyc3PFYnFFRQVK6cDAgEAgQPmnGxoaEolEKMO1tbVZWVlut1soFOI46+rq0E8gV3IAmOQEPichkiTxykZiYuLAwIDPXYRC4ezZs9HjefPmWa1WvHtzczPu9uuvv8rlcrwU4NUkSXLatGnosUwmE4lEUVFReBx80/j69ev79u3r6OhwuVwej8fj8fgMDzt48GBjY+O3337r/y6s6H/n3r9/nz8wkiT9/MckeuZlMhnO/MOHD+12e3JyMmp6PB6BgOU60vM5a9astLS05ubm9PR0m812+PDhtLS00dFRrVa7Zs2a8PBwrjG5LqWfV4cnD6y8fgaQnJyckpKSDRs2EAQxODg4MDCwYMECeof+/n6Xy5WSkoLjRDOHn32YVyQpKYknSCwmJmb//v2FhYVbt25NT0/H//aWnp6uVCrv3LmDUxQXF5eTk7N48eJVq1YlJiZmZGS88cYbBEFERUUpFIr6+voPPvigrq4uPz+/v7/f4/HQ4+RPDgCTnO85JoCmTp06a9Ys3AzIf5SpVKqCgoKTJ08KhcLu7u7MzEw/dxwaGqqrq7tw4UJRUVF2djZ+ORgDg8EQwMB8cjqdYWFhbW1teGoJC2NZ8/TKp0Kh0Gq1d+7cUSqV06ZNW7RokU6nwwtlrGO6XK7xR/tMeWD+DPT29hqNxj///JO+cerUqeMPjAdzcQz/6eDl9u3bhw8f1ul05eXleGN5eXl1dfWuXbvKy8tffvlltPH777+/du2ayWSy2WylpaVLly796quvCILIzc39+uuv1Wp1S0tLXV2dw+HgigoWykBI4n+bw7V2xPoU61pZfX09Xiujc7vdCQkJeE3Aq8lzXHqzv79fIBDg7QaDwWtpi2etTCAQdHR0UBSlVCqLiorQ9sePH4eFhdFXqMa2VuYzMJ9D8WeAJEmv9SKKsTREzydFUc3NzXK5PCsr69KlSxRF1dbWFhcXz5w502azcY3JdSn9vDpceeBaK2PGjDZ6bZFKpQaDwavPeNbKmMn3c62ssLCQJMnS0lK73e71lN1uLykpIUmysLCQuaPBYJDJZOix0+kUi8VffPFFdnY2ilMoFHZ1daFn8VoZa3IAmPzGPsc4HA6BQICXoXETvTDl5OR0d3ebTKZFixZpNBo8Al6S1ul08+fPx9u9mv6/ikml0tra2kePHlksFpVK5fVS/vjxY4FAYDab3W43/ej08c1ms1AoNBqNqCmXywsKCvr6+iwWy7Jly9CAXuMwT5+JPzA6+lCsETIzUFhYuHjxYvRHcVVVVXl5udc4XvnEIUmlUnSI7u5ukUi0aNEinjG5LqX/V4c1D/Td6YlljZmeE6SiokIulxuNxu7u7qKiIp1OR1FUQUFBVlaW1Wo1mUyvvvrqiRMnKMZVY+3zTPfVvKjVajwZsOrq6lKr1RRFdXR0ZGZmXr582W63W63WgoICpVKJu+Xl5YlEoh9++AE1c3JyVCpVV1eXyWRasGABSiZXcgCY5MY+x1AUpdFooqOjz5w5Q2/W1NSQJFlZWSmVSqdPn75p0yZ8N5g+2p49ew4cOICH8mr6/yqm0+kyMjKEQuHMmTNLS0uZL+VlZWUoSJ5bzcXFxStWrECPOzs7V61aRZJkenr6iRMn8IHwOFyn78VnYHT01PmTAafTWVJSIpPJoqOjFQoF/vMWh+SVTyQvLy8nJwc3MzIy6H2YY6IYqqqqvC7lM80xzDx47Y4Tyxqz12gURbnd7n379iUkJAiFQpVKhd5DOByO7du3JyQkyGQyjUaD/xSgXzXWPuOZY/zncrk0Gk1aWlpERIRUKlWr1X19ffjZ+vp6kiTxr0lfX59SqSRJMjk5ubKyEp0+a3IAmPx8zDFj4OcvbVpa2pUrV7iaYJxCMZ+hGHOwmc1mqVRKQXJAyHqu9/zpbt68ydME4xSK+QzFmIPNYDCkpqYSkBwQsia+7vKLob29fefOnYEabWRk5N133/33338DNSAIIZ9++unp06fv379/9erVAwcOFBYWTnREAIwdzDGBkZ+fjz9cMn7h4eERERF79uwJ1IAghKxcubK2tlYmk6nV6uLi4s2bN090RACMQ2CX3gJ1B5V5p3eyQUWO0WO73R4WFkb/9yen07lx40avVPT39+fl5YnF4sTExJKSEtzfbDZnZmaKRCKpVLp161b0+Xm9Xo9KAwAAQOiC9zFjRC+k73A4oqOjcS3h4eHhzMxMt9vttcumTZuEQqHJZNLpdEaj8dChQ2i7QqGQyWRms1mv1zudTrQ2IhaLeT6OBwAAIWHC7vm/wPr6+tasWaNWq3HdSYIgnjx58vvvv9vtdlRIuLKyMi8v79ixY8PDw8XFxVu3bkVlY8rKytAH7wEA4AXg+30MsyI6f9l5/n0JjqL3BEH09PS89dZbsbGxc+fO/e6773hCQgEwvz6AtU47T0V3n9XpuQ7EX9t/zpw5Bw8e9NoYExPz9OlTXKne5XJFREQQBBEZGbl79240wYyMjJw/f37VqlXMU/anjDwAAEw2vucY1oroPGXnfe7LVey9qKhIJBJ1dHRcunSJPsewFlrn+voAZp12noru/lSnZz2QP7X9+R05cmTTpk30LT/++GN0dHRLS8upU6eY/fnLyAMAwCTFf7uGtcoTT9l5fypE0eGi96hME72MPL7nzywexV9znl78nL+iu8/q9DzfU8BTNYBnI6LRaNasWYM/i44MDQ2heiEnT55k7s5VRh4AACYzH+9juCqic5Wd92ff69evv/nmm0lJSRKJRC6XO51O1JkgCHoZeTxOEgPBW3OeXvycv6K7P9XpuQ40Zj/99NO5c+cuXLjgVTw4Kipq+fLlVVVVrO9jUBn5zs5Ol8uVnp4+zhgAAOD5mID/K1OpVCtWrNDpdAaD4dKlSz77+/mlhCHhxo0bhYWFdXV18fHxaMvIyEhrayvukJqaarPZWPe9ffs2KgFJLyMPAACTmY//K5NKpREREf/88w96K2A2m/3/pCHrvvfv37fZbB999BHqg98uSKVSgiDu3buH3jRYLBY8DvPbWdxut9PppHd+6aWXAh4/4ueB/PHw4UOVSnX8+PGFCxfijR6PZ+nSpf39/ejtF9chdu7cef78+e3bt1ssFjw/AQDAJOfjfczUqVM3btxYUlJy7969GzduaDSavLw8nv5isdjpdN68eXN0dJR1X4lEIhaLv/nmm8HBwVu3bmk0GnygzMzM0tLSnp4e1BmPybpWRhAEvbNSqQxI/KxYD5SQkOB0Om/dukUQRFhYGPPTMF5GR0dzc3MVCkV2dvbw/xEEERkZmZmZuWvXrp6envb29rKyMvQN8G63m/7tlg6Hw2Qy1dTUwAQDAAglPu/YMCui85d291lNnbXoPUVR3d3da9euJUkyLS2turqa53P+KADm1wdwfTuLz4ruXNXpuQ6E4EL6TqdTKBR63YpnHsIr8/Qv8tq4ceP06dNlMtmRI0fQxosXLy5YsID7sgAAQAiYQlHURExt43L37t358+f/999/k+dAu3fvNplMv/32W0COOzw8PG/evEOHDm3bti0gAwIAwISAz/kHRnV1NfO+0ZhFRkaeP3/+9ddfD9SAAAAwIaBeWWCEh4e/9tprARwQJhgAwAsA5hgAAADBEpL3YwAAAIQEeB8DAAAgWGCOAQAAECwwxwAAAAgWmGMAAAAEC8wxAAAAggXmGAAAAMECcwwAAIBggTkGAABAsMAcAwAAIFhgjgEAABAsMMcAAAAIFphjAAAABAvMMQAAAIIF5hgAAADBAnMMAACAYPkfNvw5b/97J4MAAAAASUVORK5CYII=)

Research’s Comment:

![](data:image/png;base64, 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)

Mirror: Click here to view the mirror

Coordinated Disclosure Timeline

Vulnerability Reported: 3 October, 2020 12:54 GMT
Vulnerability Verified: 3 October, 2020 13:07 GMT
Website Operator Notified: 3 October, 2020 13:07 GMT
a. Using the ISO 29147 guidelines
b. Using publicly available security contacts
c. Using Open Bug Bounty notification framework
d. Using security contacts provided by the researcher
Public Report Published
[without any technical details]: 3 October, 2020 13:07 GMT
Vulnerability Fixed: 4 October, 2020 21:42 GMT