Lucene search
Npuser500OBB:148190HistoryApr 22, 2016 - 4:15 p.m.
courses.com XSS vulnerability
2016-04-2216:15:00
npuser500
www.openbugbounty.org
8
Vulnerable URL:
http://www.courses.com/s?q=%22%3E%3Cimg%20src=1%20onerror=confirm%28/OPENBUGBOUNTY/%29%3E
Details:
| Description | Value |
|---|---|
| Patched: | No |
| Latest check for patch: | 26.07.2017 |
| Vulnerability type: | XSS |
| Vulnerability status: | Publicly disclosed |
| Alexa Rank | 1088148 |
| VIP website status: | No |
| Check courses.com SSL connection: | (Grade: F) |
Coordinated Disclosure Timeline:
| Description | Value |
|---|---|
| Vulnerability submitted via Open Bug Bounty | 22 April, 2016 16:15 GMT |
| Generic security notifications sent to website owner | 22 April, 2016 16:17 GMT |
| Notification sent to subscribers (without technical details) | 22 April, 2016 18:17 GMT |
| Vulnerability details disclosed by researcher | 17 June, 2016 17:11 GMT |