myagents.nz XSS vulnerability

2016-08-03T12:43:00
ID OBB:171660
Type openbugbounty
Reporter DrStache
Modified 2016-09-17T17:29:00

Description

Vulnerable URL:
http://myagents.nz/realestate_office_detail.asp?q=0&propertyNo;=2839560?rss=1">&utm;_source=search_rss&utm;_medium=rss&utm;_term=2839560&utm;_content=title_link&utm;_campaign=site_rss
Details:

Description| Value
---|---
Patched:| Yes, at
Vulnerability type:| XSS
Vulnerability status:| Publicly disclosed
Alexa Rank| 2699926
VIP website status:| No
Check myagents.nz SSL connection:| (Grade: F)

Coordinated Disclosure Timeline:

Description| Value
---|---
Vulnerability submitted via Open Bug Bounty| 3 August, 2016 12:43 GMT
Generic security notifications sent to website owner| 3 August, 2016 12:45 GMT
Vulnerability patched by the website owner| 13 September, 2016 17:29 GMT
Vulnerability details disclosed by researcher| 17 September, 2016 17:29 GMT