toshiba.com XSS vulnerability

2016-03-14T11:23:00
ID OBB:141418
Type openbugbounty
Reporter tbm
Modified 2016-10-19T06:52:00

Description

Vulnerable URL:
http://www.toshiba.com/tic/inside-toshiba/download?code=transmission-distribution-systems&groupType;=click here
Details:

Description| Value
---|---
Patched:| Yes, at 18.10.2016
Latest check for patch:| 18.10.2016 11:30 GMT
Vulnerability type:| XSS
Vulnerability status:| Publicly disclosed
Alexa Rank| 3846
Google Pagerank| 7
VIP website status:| Yes
Check toshiba.com SSL connection:| (Grade: C)

Coordinated Disclosure Timeline:

Description| Value
---|---
Vulnerability submitted via Open Bug Bounty| 14 March, 2016 11:23 GMT
Vulnerability existence verified and confirmed| 14 March, 2016 21:32 GMT
Notification sent to subscribers (without technical details)| 14 March, 2016 22:17 GMT
Vulnerability patched by the website owner| 18 October, 2016 14:34 GMT
Vulnerability details disclosed by researcher| 19 October, 2016 06:52 GMT