Lucene search

K
openbugbountyImplosionOBB:181536
HistorySep 13, 2016 - 8:28 p.m.

it.pandahall.com XSS vulnerability

2016-09-1320:28:00
Implosion
www.openbugbounty.org
6
Vulnerable URL:
http://it.pandahall.com/ProductSearch?keyword="><%2Fscript><"
Details:
Description Value
Patched: Yes, at
Vulnerability type: XSS
Vulnerability status: Publicly disclosed
Alexa Rank Unknown / Not calculated
VIP website status: No
Check it.pandahall.com SSL connection: (Grade: A)
Coordinated Disclosure Timeline:
Description Value
Vulnerability submitted via Open Bug Bounty 13 September, 2016 20:28 GMT
Generic security notifications sent to website owner 13 September, 2016 20:30 GMT
Notification sent to subscribers (without technical details) 13 September, 2016 22:17 GMT
Vulnerability details disclosed by researcher 6 December, 2016 21:15 GMT
Vulnerability patched by the website owner 7 December, 2016 12:33 GMT