Lucene search

K
openbugbountyMLTOBB:152261
HistoryMay 12, 2016 - 11:21 a.m.

navsea.navy.mil XSS vulnerability

2016-05-1211:21:00
MLT
www.openbugbounty.org
8
Vulnerable URL:
http://www.navsea.navy.mil/desktopmodules/SharedLibrary/Plugins/MediaElement/flashmediaelement.swf?jsinitfunctio%gn=alert`OPENBUGBOUNTY`
Details:
Description Value
Patched: Yes, at
Vulnerability type: XSS
Vulnerability status: Publicly disclosed
Alexa Rank Unknown / Not calculated
VIP website status: No
Check navsea.navy.mil SSL connection: (Grade: A-)
Coordinated Disclosure Timeline:
Description Value
Vulnerability submitted via Open Bug Bounty 12 May, 2016 11:21 GMT
Vulnerability existence verified and confirmed 13 May, 2016 05:50 GMT
Vulnerability details disclosed by researcher 5 August, 2016 06:12 GMT
Vulnerability patched by the website owner 10 August, 2016 06:40 GMT