Lucene search

K
openbugbountyMaxOBB:185239
HistoryOct 07, 2016 - 3:28 p.m.

swissquote.ch XSS vulnerability

2016-10-0715:28:00
Max
www.openbugbounty.org
9
Vulnerable URL:
http://www.swissquote.ch/espace/extern/SFBoerse/resultNew.jsp?lang=de&s;=CH0009987501_M9_CHF&title;=%22%3E%3Csvg/onload=alert(/OPENBUGBOUNTY/)%3E
Details:
Description Value
Patched: Yes, at 08.11.2017
Latest check for patch: 08.11.2017 07:32 GMT
Vulnerability type: XSS
Vulnerability status: Publicly disclosed
Alexa Rank 35368
VIP website status: Yes
Check swissquote.ch SSL connection: (Grade: B-)
Coordinated Disclosure Timeline:
Description Value
Vulnerability reported via Full Disclosure 7 October, 2016 15:28 GMT
Generic security notifications sent to website owner 7 October, 2016 15:30 GMT
Vulnerability details disclosed by researcher 7 October, 2016 15:30 GMT
Vulnerability patched by the website owner 8 November, 2017 22:48 GMT