logo
DATABASE RESOURCES PRICING ABOUT US

rockymountaingerminator.com Cross Site Scripting vulnerability OBB-1383033

Description

Following coordinated and responsible vulnerability disclosure guidelines of the **[ISO 29147](<https://www.iso.org/standard/45170.html>)** standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence. Affected Website:| **[rockymountaingerminator.com](<https://www.rockymountaingerminator.com>) ** ---|--- Open Bug Bounty Program:| **Create your bounty program now**. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| **[XSS (Cross Site Scripting)](<https://www.owasp.org/index.php/Cross-site_Scripting_\(XSS\)>)** / CWE-79 CVSSv3 Score:| 6.1 [CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N] Disclosure Standard:| Coordinated Disclosure based on **[ISO 29147](<https://www.iso.org/standard/45170.html>)** guidelines Discovered and Reported by:| **Broly157 ** Remediation Guide:| **[OWASP XSS Prevention Cheat Sheet](<https://github.com/OWASP/CheatSheetSeries/blob/master/cheatsheets/Cross_Site_Scripting_Prevention_Cheat_Sheet.md>)** Export Vulnerability Data:| Bugzilla Vulnerability Data JIRA Vulnerability Data [ Configuration ] Mantis Vulnerability Data Splunk Vulnerability Data XML Vulnerability Data [ XSD ] Vulnerable URL: ![](data:image/png;base64, iVBORw0KGgoAAAANSUhEUgAAAiEAAABfCAIAAACxwoBIAAAACXBIWXMAAA7EAAAOxAGVKw4bAAAen0lEQVR4nO2dfWxT1/nHL8YE49iQF8cEko4EbYFOiEYoy1ItoBQmOoUoctNAO5o2LiBgKMuyCLrgTTSlLGSBoJZ1EZqggohtaKoQixBKkUcnL4sgCanxPDd4aepYwXidkyZgIIDJ/f1xfr27veec6+uX65fwfP7yPT73nO95zrl+fM+1n2cOy7IMAAAAAMiAIt4CAAAAgFkL+BgAAABALsDHAAAAAHIBPgYAAACQC/AxAAAAgFyAjwEAAADkInF9TH5+/o0bN2iHADA7SPaFHV39SWSNJJIaXxLUx/zzn/+cmZl57rnniIcAMDtI9oUdXf1JZI0kkhp3gviY0dFRrVZLfGtqaurw4cO0wwjp6uqqrKykHSY+InZLBIJOVkLpj1BMdFdmdEELO5IBxnemBPpHR0fT09MjbC1CSVIMEvmSIE7cz3/+8wULFpw5cyaSlmchrCgul0uj0Uh5S6RmGBQXF1++fJl2mPhE1xpRR4q86enp2IiRQiRiEnku0MKOUGEcZ0qg3+VypaWlRdha5KqCGiTyJcFJ5fry+XwKhcJqtQYCgUhann0k4l7Z7du3nU5nWVkZ8RCIDfPnz4+3hP+RUGKiRbQWdryMw+lXKpUFBQUMw3AvImktcmFyG4QvlevL7/er1ernnntu7ty5svaedEjyMe+//35+fn5mZubrr78+NTXFMMzU1FReXp7f758zZ86ZM2f4h8eOHdNqtUeOHFm8eHF6enptbe2DBw9QO/39/WvXrtVqtTk5OS+//PJnn31G7K6rq2vjxo3z5s0THL700ktHjhxBhTdu3Jg/fz4SwzDMrl279u3bJ17hO9/5jvjpfA3oLvjw4cNZWVlLliw5deoUwzD37t3btWtXVlbWM88888477zx58oRhmCdPnuzfv3/x4sWpqambN28eHx8XDOdf//pXZmbm3//+d4Zhfve737344ovcW7/85S9ra2tRX+3t7fn5+ampqa+88sr4+Pi+ffuysrIyMzPffPPNe/fuofq4AMHdOn+zgt9senr6a6+9Rpw7NC/PP//8ggULsrKyNm/efOvWLX6ztHYYhrl9+/amTZu0Wm1+fn57ezvX9cOHD7dv367VapctW/b2228jQ+EmlThwiWLwURAHS7OhYK75EKeYuBikTyW+zvkQGydaW6Jx+BANxZAuT9Qg8Vrm68/Jybl+/TrDMDk5OdeuXUPvfvzxx3jXAvh1+NYgflAQZ4G2qLi3cPH4kggqVVCBk8r1NT4+LmgT4AjuY/x+v9Vq7e3t7evr83g8TU1NDMMsWrRoaGhIo9FMT0/X1NTwD1966SW/39/X1zcwMDAwMDA4ONjW1oaaqqioMBqNbre7p6entLRUpVIRe6Q9jKmoqDCbzajw4sWLMzMz3d3d6NBsNpeXl4tXMBgM4qfjAx8aGrLb7adPny4tLWUYpr6+3uPxDA4Odnd3d3V1dXR0MAzT1tZmNpvNZrPT6Vy6dKnD4eA3MjU1VVVV1draunbtWoZhDAaDxWK5e/cuN7SqqirOyD09PVar1ePxrFy50ufz2Wy2q1evulwuk8mE6hMFiM+dzWZDc+d2u1E7grljGGZwcHDnzp1er9dut+fm5tbV1Ulph2GYurq6lJSU4eFhs9nc2dnJ1T948OD9+/dtNlt3d7fFYjlx4gTNpBIHLkUMcRT4YIk2xIXxIU4xbS6kj0jk8QOxcZq1pRiHD226iZcn7VoW188wjNFo3LBhA/I9OP39/Rs2bDAajcTWiEpoF5rI3BHF40tCRCqukzjwzMxMQZvA/xDfSnO5XAzD3LlzBx329vYuX76ce4v4PAad4na7Ufn58+eLiopYlp2YmFAqlcStUrfbnZeXh177/X6NRjMxMYEfejwetVqNWiguLm5sbNy6dSvqceHChY8ePRKv4Ha7xU/HB87JYFk2EAhoNJqRkRF02NXVVVJSwrKsXq8fHBzE7YasUV5evmfPHv5bJSUlH330EVdnenoa9TU5OYkq9PT0KBSK+/fvczb/9re/TROAzwK3IS6Yu56eHtrc8RkeHs7OzuZXoLUTCARUKhWn5/z581zXOp3O7/ej11artbi4mGhSiQOXIoY4CnywNBsKhAnAp5i2GCSOiP3mwhZMB7FxmrXDMA7RUMTLk3Yts9h1iuP3+1taWjIyMrZs2eJ0Orlyp9O5ZcuWjIyMlpYWbpHwW6N9UNAuNHxRiX8QsZjBiVKJOln6xCXyY7/4Etozf8FHGM3HqFQqrtzhcOj1evT61VdfLSwsbGxsPHr06N/+9jeuTiAQ8Hg86PX58+fXr1/PvSU4LCwsvHLlitfrzc3NnZyc1Ov1gUDg5MmTVVVVUioEPZ02cJZlPR5PSkoKd+h0OrOzsycnJ5VKJf6UD51uMpkUCsWHH37If6u1tdVoNLIs+8EHH2zZskXcyPxDooCQJoj21uDg4A9/+MOlS5fqdLqMjIy0tDSRi4emx+FwoPKJiQmGYXRfk5GRgRYAblKJA5cihjgK/BQpNhRAnGJiO9JHxH5zYQvOIjZOs7ZE4/ChGQq/PEWuZcGFSWNiYsJgMCiVSq5EqVQaDAbODRNbw5WIX2jEEhHxxBkXSCXqZOkTBz6GRkyf+f/pT386efLk6tWrHz161NjY+NOf/hSVz507d8mSJei1+K+Wy8vLzWbzxYsXKyoqFi1aVFhYaLFY+Dtd4hWCnh4exKd89+/fP3/+/Llz55qamvjb4lVVVZcuXWIY5uLFi2ijLO4YDIZ169ZZLBar1Yq0RcL09LRCoRgYGLBarVar1WazWa3WqOgUJ7qjEBD1B7lx/Dk+zVC0y5OIFP2ff/55XV2dxWI5ePAgV3jw4EGLxbJnz57PP/+c1prIB0VII5UOLpWoE5cKBEfcBYV3H8PwblEvXLjA3aLysVqtubm5gsJAIKDT6bgNAcEhy7K9vb3FxcWVlZWXLl1iWbajo6O+vh59y5NSIejptIGzontlVqsVP12pVDocDpZlKyoq6urq+O+uWrXKbDanpaWhbQ2JX36JAu7cuaNQKPjbI6Hex3z55Zf8r5lWq1XifQzavXG5XKicv1em0WhE9g9pJZHcxxBHgZ8iZb8RB59ikb0yiVPJX9jS98pwa4d6HyNiKD7o8qRdy/iFibN7926NRtPY2Ojz+QRv+Xy+hoYGjUaze/fuoK1xHxS0C03kPob2QSQ4iyZVoBOXCvcxUgjfx/j9fqVSyW1fcodoaqurq8fGxux2e2FhYXNzM8uyDofjRz/60ZUrV3w+n9vt3rFjR0VFBdcy2n61WCyrVq3iCgWHCL1er9frUf2xsbGFCxcWFhZKryD+LrcLTFwxO3bsqKysdLvddrt9zZo1x48fZ1m2paWluLjYZrONjY2hr0KC04eGhlQqlc1m49o5cODA6tWrueFL32AhCiguLt6xY4fX63U6naWlpVJ8jGDu9Hp9R0fH5OSk0+k0GAwSfQzLstXV1QaDweVy2e321atXc+W7d+8uKSmx2+0ej6etre3gwYNEk0Z3rwwfBXGwuA2Jc81/HkCcYuJcSByRYGHfuXNHqVQODQ1xe0HExonWlmgc/nCIhiJenrRrmXhhCqipqeE8IhGXy1VTU4O3RvugCHqhCYxAE89iS0JcKqcTlwo+Rgrh+xiWZZubm9Vq9enTp/mH7e3tGo2mtbVVr9enpaW98cYb6Jnno0ePmpubCwoKUlJS9Hp9TU2N1+sV9LJ3716TycS1LzhEbN26tbq6mjssKioS1BGvIPJu0BXj9/t37typ0+lyc3Obm5vRJ0IgEHjrrbd0Op1KpTIYDOirkOD0+vr6devWcYdo74izm3QfQxQwPDy8fv16jUbz3e9+9/jx41J8DPvNubNYLEVFRSqVKjs7u7GxUbqP8Xq9FRUVGo0mLy+vtbWV/4nW0NCQm5urVqvLy8vR9z65fQw+CuJgcRsGFUacYuJcSBwRvrCbmpr4lxKxcaK1pRhHUE40FPHyRCfi1zLxwgwbQWu0DwopFxq/hCYeIfjsCk8q+BgpBPExYRCJrQsKCq5evUo7nDX4/X6VSiXym5xkZGhoiHumCogT+cKOjbVp13J0L0yZLnM5PvRn6yeSrCjj8hCIxs2bN0UOZw2XL18uLS2NJLJTAmK1WpcvXx5vFclB5As7vtaO7oWZRJd5EklNHBIxlox0EiS8dkgypqam0K+WZZUUG959991Tp07997//vXbtmslk2r17d7wVzWbA2kAyksQ+JkHCa4cqg9sdllVVbCgrK+vo6MjNza2pqamvr6+trY23otkMWBtIRuawLBtvDWHy61//2uv1/va3v52amuro6Ni/fz/DMKOjo6tWrULBWmjlMsmIsB35FAIAAMSLJL6P4f4MNTk52dLSggqXLVvm8/nQa355DGRECF85AADA7CBZfYxIJPBYhjqPbt6BWRnBHgCApxlJeTAFYc9poeClhDQnRn1nIgivLYjUzUXbxiN484m6DKJZpDTI1aEFaRe3Jy26PgcxTDpxWoMmKUB88cUXqampn376KcMw4+Pj6enpn3zySdAxAgDwdCIptr8gdDYxNrjEkOa0qO9hh9fGI3UjaOUyyaCZJdQI5xwS7Rk03jstnwI+rcTY6VkY+fn5JpOpoaGBYZgDBw6Ul5e/8MILxNEBAABIiu0v8m9BLhQ8Iy2kOTHqOxtBeG2W/m9bkX/hyiEDNwutQWKbArVS7CkSXR9BC5NOnFZi7PQxDJZlHz16tHLlyubmZp1OxwVrAAAAwAktlgxCPBQ8Sw+hQYv6zhFGeG02dB8jkwxayHS8QWKb0oMbcoe0eO98iPkU8GmlxU6ngbK9oThaAAAANMJ55h92EHXxqO8xC68tkwyaWaRHOJeDkAK247HT8b0yVO71ehUKhdfrlUs3AACzA3EXhH/hDRoKnhWN6kiM+s5GEF6bDWuvLOoyaCHTpUc4D+M+RiS6PhEuTDrx9pQYO524VzY5OZmdnX3u3LmMjAyUvwAAAIBIOHtl4qHgWVEfQ4z6zkYQXpv9ZqRuvhJ+uSB8uhwyiCHTpUc4D8PHsPTo+ghamHTitBJjpxPZs2cPyuB56NChsrIykdEBAPCUE46PEQ8Fz4p+JhKjvocEMa44F6lboIQfwZsfPl0OGSKx5aUQno+hRddH0MKkE6eVGDsdZ2BgQKPRoNRP09PTeXl5nZ2dIY0UAICnh+SLJbNixYrOzs7vf//7IEPAzZs3161b95///CfeQgAAAP6fxIrtL4UECa+dIDL4QHR9AAASjWSNJZP43Lhx4yc/+Ql6/eTJk9/85jf//ve/o95LSPHecRmPHz/+8Y9/HK9bH76JcCVHjhzJz8//wx/+sH///mefffYvf/lLXERKJ0EyTUghiaTiJLX4pxDwMXJhNBrz8vLQ67lz587MzOzduzfqvYQU7x2XMW/evJSUFDmESYFvIoGSBw8emEyms2fPVlVVNTU1NTY2NjU1xUWkRBIk04QUkkgqTlKLf0qJ9wOh2QMK84xe+3w+hULB/4N9IBBYs2ZN7BO1Cn4vgMsYHBxEIQlEWuASpIf9Qwa8EdxEfCVut1utVnNvjYyMLFy4MKSuwxMZ6gA5Dh06VFdXFy0l4vBXWhggqXhfDQ0NKpUq1BT3MYazM98I/LHQyoF4AfcxUYOfSsDv96vVan4c5blz516/fj3uvxHAZWRkZPj9/tgrwU3EVzIzM6NQ/G9xKhSKmZmZWEsMhaikeJCY3yHCpBVIqqCv8fHx48ePX716FQ/ul1AkSEYPQDrJ98wfiDFKpbKgoID/IpJzw2hEbiLXFsUUD3Lnd+BL5feFXH6C70ElSEYPIDSC3un4/f6dO3fqdLrc3Nzm5uZAIIDuQI8ePZqXl5eWlrZ161Z+3K3p6elt27ZpNJpvfetbBw4c4Oq3tLTodLrs7OyTJ0/iJcSO2K/vdgU1cVC1trY2LpMxiiBJO118UGq1esuWLT6fb+/evSj4mNFo5EeuxDuanJzkTIr/TYfIyMiIWq1G4QZ8Pl9aWtqVK1dYlu3r6ystLdVoNEuXLq2qqkJ/pCcW4qZGLY+NjW3cuFGj0RQUFLS0tIjv/wikdnd3i8umWZWoUHq/gpKRkRHBP4T4W2cCkGaaPaWMiNamxAonTpxAf0pl6XYIBAJNTU16vV6tVldXV/t8Ptp1wQ1ZykoLWyq/L/4NTXt7O/GS6evrKykpUalUOp2uurp6bGxM4iXD0hdqSMr54mmXm/hlGLYMIBKC+5ht27ZVVFS43W673b5mzZrjx4+jqL1vvPGGx+NxOp2lpaV79uzh6ptMpldffXVkZMThcJSVlX3wwQdcfa/X293dPTQ0hJcQO2K/jhAsqKnDQNWqq6vdbvfw8PCqVauam5tpp4sMqqamZmxsDA1Kp9MZjUY0xrKysvr6eq5BvCOWZblUApzHCmrbQ4cOrVu3jmXZPXv2bN26FRXq9fqTJ09OTEyMjIwcO3YM/T+UWIibGrVgMBj4CkPyMdnZ2evXrx8YGBA/BbcqUaH0fgUl586dW7lyJfeW3+9PSUnhB65G9PX1rV+/nnuKQ7SnlBHhiJwl6JRl2fLy8rNnz6LXNDu0tLQUFRWhMAr19fUWi4V4XQhibwddaWFLFdifa3NkZIR4yZw4ceLDDz+cnJz0er0NDQ0ouoSUS4alL9SQlAvsTLvcRC7DMGQAkRPExwQCAY1Gw10nXV1dJSUlaG3duXMHFfb09Cxfvpw7BQ+bj0eSx0uIHRFrsqQgWqga+vM5y7Lnz58vKiqinS4yqKDh9GkdsaJ/1KeBB8knRuOnhegnZihAQcz4CkPyMbRkBIJTBFalKZTeL7+krq5OoVB0dXXx321paVEqlefOnUOHxIQLxKQDxBG53e68vDwRedKzPPBTPIjYAU+dQLwuBD4m6EoLWyoeS4L74QN+yQh4GjJ6ANEiiI8RRI93Op1obdEinRDD5ot/YxXpiFiTiMvlUqlU3KHD4UDh+omnhzoo/iGtIzYsH8OSguQTo/HjhbQMBR6PR6AwJB+DwJMRBD2FKDukfrmSiYmJtrY2fjg49Ply8eJF7iOMlnCBlnRAMKJAIODxeIKKlJLlQZDigWgHYuoE8etC4koLW6qIjyEu3actowcQLaL8uzLxsPnRghZwPhnBg+QTo/HjhfKZmpiMICghJREQJz09vbq6Gn1NRvh8vpmZmU2bNi1YsACV0JIjEJMO4COaO3fukiVLxGVIzPIg+EWZiB3w1AnRIjypIfG0ZfQAooa4C6JtK4l8f8HD5ku5jxHZK8O/VQXdK7tw4QK3V0YM/hjqoPj3McSO2LDuY4IGyeei8RMLcVOz2F7ZhQsXQrqPEUlGQDtFouygjYgYkNgjnnCBaE8pI8KRmOUBzzTBh28HPHVCUAtIWWlhSw3pPubpzOgBRIXgz/x37NhRWVkpeDwusrbwsPlSfAyxI1pNHO4B6djYmN1uLyws5J75E08PdVACH4N3xH4zlYDb7eZvdNDAg+QTo/HTQvTTMhSgZ/6cQnEfMzw8zK8QNBkBS7IqTaEIuIn4SqT4GO4tLuECMekAbUTiT48kZnkQpHgQsQOeOkGKjwm60sKWGupe2VOb0QOIkPB/u8xVEKwtPGy+RB8j8tvloCJRtdbWVuJvlyMfFN/HEDtCcKkEpqenVSqV+PNDYpB8YjR+Woh+WoYC/m+Xjx49Ku5jPvroo9WrVwe1MB/cqjSFIuAm4iv58ssvFQoFtynf29srHoyADTHpgPQHZuIIUjyI2AFPnSDlTi7oSgtbaqg+BjJ6AOExS2LJROsjI4od1dfX8x9RJibos5j2ryO54ZsIV1JZWalSqc6ePdvU1JSSkoJ/xCQCBQUFMsUHivqSlk9qDEhq8U85yZc/hsjo6OiqVavu3r2bOB09fvzYarV+73vfk1tShPzjH//4wQ9+EJeuBSbClXz11VcqlerRo0dKpTI1NTUeGuNGzJY0AMgKxJKRi3nz5iW+g2EYJl4OhsFMhCtJT09nGIb7LRkAAElHpL9dhlwOQLSITcadkEi0jDsAkHRE5GMSJ5fDsmXLYrOrELOOnkJik3EnJOKYcQdWGjA7iMjHRCWeOcMwo6OjWq028naA5GJqaurw4cPo9fj4uM1ma2ho4N596623xsbGrl27FmNVo6OjaI+OJqOhoQFFExBpAa1nQVNh8NVXX73++uuZmZk5OTm/+MUvHj9+HElrABB7EsLHSEybAcwyIONOULZt2zYzM2Oz2cxms8VigcwoQNIRvo+JYs4MBtI/ALOIaCXLefjw4cWLFzs6OnJycp599tmjR4/++c9/jp5MAIgFofmYjz/+mHvd1dW1cePGefPmMQzT39///PPPL1iwICsra/Pmzbdu3cLrizTI3ytDr9vb2/Pz81NTU1955ZXx8fF9+/ZlZWVlZma++eab9+7dQzVv3769adMmrVabn5/f3t5O3JTo7+9fu3atVqvNycl5+eWXP/vsM9T+4cOHs7KylixZcurUKYZhnjx5sn///sWLF6empm7evHl8fJwm+IsvvkhNTf30008ZhhkfH09PT//kk0/4Fe7du7dr166srKxnnnnmnXfeefLkiWBQ6enpr7322tTUFKr/8OHD7du3a7XaZcuWvf322/z6fJFE2SJ9CWrioGpHjhxZvHhxenp6bW3tgwcPaKcHHZTITNE6mpqaysvL8/v9c+bMOXPmjPg6EbE8PsW0qadZm2GYW7duvfjii1qtdsWKFX/84x+DiuGDL/KcnJzr16+jF2iTjWhVmnKO6enpmZmZlJQUdKhSqe7fvx+SNgCIO1J9TH9//4YNG4xGI1fC3ygbHBzcuXOn1+u12+25ubl1dXWo3Gg0btiwAV1vQRvk8Pv9Vqu1p6fHarV6PJ6VK1f6fD6bzXb16lWXy2UymVC1urq6lJSU4eFhs9nc2dlJlF1RUWE0Gt1ud09PT2lpqUqlQu0PDQ3Z7fbTp0+XlpYyDNPW1mY2m81ms9PpXLp0qcPhYCiRN/Pz800mE3pscODAgfLy8hdeeIHfY319vcfjGRwc7O7u7urq6ujo4AZls9l6e3v7+vrcbjc3ioMHD96/f99ms3V3d1sslhMnTnD1BSLxEpG+BDWJY/H7/X19fQMDAwMDA4ODg21tbbTTRTqSMlPEjhYtWsSl+pCS35dmeeIU08pp1q6rq1u4cKHD4bh06VKoPkZkkfPBrUpTzrFo0aI1a9aYTKbHjx/fvXu3ubm5qKgoJG0AEH+C/kszaCIKASi3BFdNSn4IPExT0KQUKPIjFw2CmCWFmMzDRUqPgef2YEmRN1E5MUkJQjwLDjHjDjGnBS4SL4lZxh3xjmKZcUdiuh2R8qTIuMPPbeNwOAoLC1NSUtRqNcMwly9fFhEGAAlIcB8jJWcGnluCXzlofgjxgLvEIEiCHDC0LCl4Mg/8s4yY20McWpISiVlwgqbWkBLhLWYZd0IdlOCQ1hEbuo9hJafbIZYnS8YdPLfN5OTksWPHON8MAElE8L0yKYkoRHJLSM8PIQfSk5rguT1EstQQk5SEQWzS7TCzKOOOxHQ7xPJkybiD57ZRq9XvvffegQMHoqIWAGKKFEcknoiCmFsCvZaYHyKM+xi0v8FF5A66v8F+ncyD+I0Sz+3B0vfKRJK+SMyCEzS1hpT7mJhl3AljUOw372OIHbGh38eEl26HTf6MO7///e/XrFkjcjoAJCwhxF2mJaJgSbklULnE/BBh+BiWZaurqw0Gg8vlstvtq1evxj8XiMk8iFc7nttDxA7EJCUcUrLgBE2tITEbQswy7oQ6KBbzMVHJuCMx3Y5IeVJk3PH7/fyg/YFAYPny5V1dXeJdAEBiEk5sfzyXA55bIqQGw/MxXq+3oqJCo9Hk5eW1trbinRKTeRA/Q/HcHjSpQZOUSMmCEzS1RqJl3Al1UOw3fUxUMu5IT7fD0vO4JEXGHUHlzs5OuIkBkpdwYvuvWLGis7Mz7n/A5nPz5s1169ZBpELpJGA2hJ/97Gd2u/2vf/2r3JIi4eHDhytXrvzVr361fft2mbqAqP7AbCKc2P43b96Muo4IsVqty5cvj7cKICKOHj0q008eosj8+fPPnj0rd0IE4v/GACAZSeL8Me++++7SpUsrKytHRkZMJhP86ibZgYw7iOzs7Pfee0/WLgAgZkSaPyaOlJWVdXR05Obm1tTU1NfX19bWxlsRAESB+fPn47+kB4AkZZbkWgYAAAASkCS+jwEAAAASHPAxAAAAgFyAjwEAAADkAnwMAAAAIBfgYwAAAAC5AB8DAAAAyAX4GAAAAEAuwMcAAAAAcgE+BgAAAJAL8DEAAACAXICPAQAAAOQCfAwAAAAgF+BjAAAAALkAHwMAAADIBfgYAAAAQC7AxwAAAAByAT4GAAAAkAvwMQAAAIBcgI8BAAAA5AJ8DAAAACAX4GMAAAAAuQAfAwAAAMgF+BgAAABALsDHAAAAAHLxf1+psXi2hjFJAAAAAElFTkSuQmCC) --- Research's Comment: ![](data:image/png;base64, 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) --- **Screenshot:** ![rockymountaingerminator.com vulnerability](/twimages/screen-1383033.jpg) **Mirror:** [Click here to view the mirror](<http://1383033.openbounty.org/mirror/>) ### Coordinated Disclosure Timeline Vulnerability Reported:| 5 October, 2020 11:54 GMT ---|--- Vulnerability Verified:| 5 October, 2020 12:05 GMT Website Operator Notified:| 5 October, 2020 12:05 GMT a. Using the ISO 29147 guidelines| ![](/images/done.png) ---|--- b. Using publicly available security contacts| ![](/images/done.png) c. Using Open Bug Bounty notification framework| ![](/images/done.png) d. Using security contacts provided by the researcher| ![](/images/done.png) Public Report Published [without any technical details]:| 5 October, 2020 12:05 GMT Vulnerability Fixed:| 6 October, 2020 06:51 GMT ---|---