junkmail.co.za XSS vulnerability

2016-07-14T11:08:00
ID OBB:166751
Type openbugbounty
Reporter stamparm
Modified 2016-07-22T09:11:00

Description

Vulnerable URL:
http://www.junkmail.co.za/computers/gauteng/test/k-c16r2/page-1/s2?okw=![](null)
Details:

Description| Value
---|---
Patched:| No
Latest check for patch:| 30.07.2017
Vulnerability type:| XSS
Vulnerability status:| Publicly disclosed
Alexa Rank| 5969
VIP website status:| Yes
Check junkmail.co.za SSL connection:| (Grade: F)

Coordinated Disclosure Timeline:

Description| Value
---|---
Vulnerability submitted via Open Bug Bounty| 14 July, 2016 11:08 GMT
Vulnerability existence verified and confirmed| 15 July, 2016 08:52 GMT
Generic security notifications sent to website owner| 15 July, 2016 08:52 GMT
Vulnerability details disclosed by researcher| 22 July, 2016 09:11 GMT