Lucene search

K
openbugbountyNpuser500OBB:141935
HistoryMar 17, 2016 - 6:58 p.m.

3m.com.es XSS vulnerability

2016-03-1718:58:00
npuser500
www.openbugbounty.org
29
Vulnerable URL:
http://www.3m.com.es/3M/es_ES/empresa-es/todos-productos-3m/?N=5002385+8711017&Ntt;=%3Cscript%3Ealert%28%22XSSPOSED%22%29%3C%2Fscript%3E&LC;=es_ES&co;=cc&gsaAction;=scBR&rt;=rs&type;=cc
Details:
Description Value
Patched: Yes, at 01.10.2016
Latest check for patch: 01.10.2016 10:33 GMT
Vulnerability type: XSS
Vulnerability status: Publicly disclosed
Alexa Rank 907057
Google Pagerank 0
VIP website status: No
Check 3m.com.es SSL connection: (Grade: A-)
Coordinated Disclosure Timeline:
Description Value
Vulnerability submitted via Open Bug Bounty 17 March, 2016 18:58 GMT
Generic security notifications sent to website owner 17 March, 2016 19:01 GMT
Notification sent to subscribers (without technical details) 17 March, 2016 22:17 GMT
Vulnerability details disclosed by researcher 14 April, 2016 19:11 GMT
Vulnerability patched by the website owner 2 October, 2016 02:46 GMT