sellerdynamics.com XSS vulnerability

2016-05-05T16:32:00
ID OBB:150134
Type openbugbounty
Reporter dim0k
Modified 2017-01-24T10:23:00

Description

Vulnerable URL:
http://www.sellerdynamics.com/ebayrepricer.aspx#prettyPhoto[xss]/0,![](x)/
Details:

Description| Value
---|---
Patched:| Yes, at 20.01.2017
Latest check for patch:| 20.01.2017 10:55 GMT
Vulnerability type:| XSS
Vulnerability status:| Publicly disclosed
Alexa Rank| 762246
VIP website status:| No
Check sellerdynamics.com SSL connection:| (Grade: F)

Coordinated Disclosure Timeline:

Description| Value
---|---
Vulnerability submitted via Open Bug Bounty| 5 May, 2016 16:32 GMT
Vulnerability existence verified and confirmed| 6 May, 2016 09:16 GMT
Notification sent to subscribers (without technical details)| 6 May, 2016 10:17 GMT
Vulnerability details disclosed by researcher| 29 July, 2016 10:12 GMT
Vulnerability patched by the website owner| 24 January, 2017 10:23 GMT