Lucene search

K
openbugbountyEbOBB:156793
HistoryMay 28, 2016 - 6:27 a.m.

secure.admiral.com XSS vulnerability

2016-05-2806:27:00
eb
www.openbugbounty.org
6
Vulnerable URL:
https://secure.admiral.com/tellAfriend/tellAfriend.php?media=%22%3E%3Csvg/onload=prompt%28/OPENBUGBOUNTY/%29%3E
Details:
Description Value
Patched: Yes, at 24.11.2017
Latest check for patch: 24.11.2017 11:10 GMT
Vulnerability type: XSS
Vulnerability status: Publicly disclosed
Alexa Rank Unknown / Not calculated
VIP website status: No
Check secure.admiral.com SSL connection: (Grade: C+)
Coordinated Disclosure Timeline:
Description Value
Vulnerability submitted via Open Bug Bounty 28 May, 2016 06:27 GMT
Generic security notifications sent to website owner 28 May, 2016 06:29 GMT
Notification sent to subscribers (without technical details) 28 May, 2016 10:17 GMT
Vulnerability details disclosed by researcher 4 June, 2016 07:11 GMT
Vulnerability patched by the website owner 24 November, 2017 11:10 GMT