Lucene search

K
openbugbountyNeoOBB:166679
HistoryJul 14, 2016 - 5:47 a.m.

virginia.edu XSS vulnerability

2016-07-1405:47:00
Neo
www.openbugbounty.org
14
Vulnerable URL:
http://www.virginia.edu/search/site/%22%3E%3Cscript%3Ealert('OPENBUGBOUNTY')%3C/script%3E
Details:
Description Value
Patched: Yes, at 24.11.2017
Latest check for patch: 24.11.2017 11:39 GMT
Vulnerability type: XSS
Vulnerability status: Publicly disclosed
Alexa Rank 5183
VIP website status: Yes
Check virginia.edu SSL connection: (Grade: A-)
Coordinated Disclosure Timeline:
Description Value
Vulnerability submitted via Open Bug Bounty 14 July, 2016 05:47 GMT
Generic security notifications sent to website owner 14 July, 2016 05:50 GMT
Vulnerability details disclosed by researcher 21 July, 2016 06:11 GMT
Vulnerability patched by the website owner 24 November, 2017 11:39 GMT