libantiquities.exlibris.co.il XSS vulnerability

2016-03-15T11:17:00
ID OBB:141644
Type openbugbounty
Reporter amlnspqr
Modified 2016-03-30T05:28:00

Description

Vulnerable URL:
http://libantiquities.exlibris.co.il/F/3D73YPXJK2PD42HT4BJASF8KYJ8BBBB4ARE36K7XIGIXUI64B6-70906?func=find-e&request;=%27%3E%3Csvg+onload%3Dalert%28%2FXSSPOSED%2F%29%3E&find;_scan_code=SCAN_TIT&local;_base=IAA1&x;=0&y;=0
Details:

Description| Value
---|---
Patched:| Yes, at 29.03.2016
Latest check for patch:| 29.03.2016 12:26 GMT
Vulnerability type:| XSS
Vulnerability status:| Publicly disclosed
Alexa Rank| Unknown / Not calculated
Google Pagerank| 0
VIP website status:| No
Check libantiquities.exlibris.co.il SSL connection:| (Grade: F)

Coordinated Disclosure Timeline:

Description| Value
---|---
Vulnerability submitted via Open Bug Bounty| 15 March, 2016 11:17 GMT
Generic security notifications sent to website owner| 15 March, 2016 11:20 GMT
Vulnerability details disclosed by researcher| 29 March, 2016 12:11 GMT
Vulnerability patched by the website owner| 30 March, 2016 05:28 GMT