Lucene search

K
openbugbountyNeoOBB:167279
HistoryJul 17, 2016 - 3:13 p.m.

bargello.com XSS vulnerability

2016-07-1715:13:00
Neo
www.openbugbounty.org
10
Vulnerable URL:
http://www.bargello.com/error.asp?msg=%3Cscript%3Ealert(%27OPENBUGBOUNTY%27)%3C/script%3E
Details:
Description Value
Patched: No
Latest check for patch: 27.07.2017
Vulnerability type: XSS
Vulnerability status: Publicly disclosed
Alexa Rank 434296
VIP website status: No
Check bargello.com SSL connection: (Grade: F)
Coordinated Disclosure Timeline:
Description Value
Vulnerability submitted via Open Bug Bounty 17 July, 2016 15:13 GMT
Generic security notifications sent to website owner 17 July, 2016 15:16 GMT
Notification sent to subscribers (without technical details) 17 July, 2016 18:17 GMT
Vulnerability details disclosed by researcher 24 July, 2016 16:12 GMT