Search...

eduniversal-ranking.com XSS vulnerability

2016-12-19T00:14:00

ID OBB:198624
Type openbugbounty
Reporter Xany
Modified 2017-11-25T09:37:00

Description

Vulnerable URL:

http://eduniversal-ranking.com/search/index?keyword="&gt;&gt;

# xany

##### Details:

Description| Value  
---|---  
Patched:| Yes, at 25.11.2017  
Latest check for patch:| 25.11.2017 09:37 GMT  
Vulnerability type:| XSS  
Vulnerability status:| Publicly disclosed  
Alexa Rank| 167007  
VIP website status:| No  
Check eduniversal-ranking.com SSL connection:| (Grade: F)

##### Coordinated Disclosure Timeline:

Description| Value  
---|---  
Vulnerability submitted via Open Bug Bounty| 19 December, 2016 00:14 GMT  
Generic security notifications sent to website owner| 19 December, 2016 00:17 GMT  
Notification sent to subscribers (without technical details)| 19 December, 2016 02:17 GMT  
Vulnerability details disclosed by researcher| 26 December, 2016 01:13 GMT  
Vulnerability patched by the website owner| 25 November, 2017 09:37 GMT

JSON Vulners Source

Initial Source

{"type": "openbugbounty", "viewCount": 2, "enchantments": {"score": {"value": -0.0, "vector": "NONE", "modified": "2017-11-26T22:21:09", "rev": 2}, "dependencies": {"references": [], "modified": "2017-11-26T22:21:09", "rev": 2}, "vulnersScore": -0.0}, "reporter": "Xany", "title": "eduniversal-ranking.com XSS vulnerability ", "cvelist": [], "bulletinFamily": "bugbounty", "cvss": {"score": 0.0, "vector": "NONE"}, "references": [], "enchantments_done": [], "modified": "2017-11-25T09:37:00", "description": "##### Vulnerable URL:\n \n \n http://eduniversal-ranking.com/search/index?keyword=\">>\n \n # xany\n \n ##### Details:\n \n Description| Value \n ---|--- \n Patched:| Yes, at 25.11.2017 \n Latest check for patch:| 25.11.2017 09:37 GMT \n Vulnerability type:| XSS \n Vulnerability status:| Publicly disclosed \n Alexa Rank| 167007 \n VIP website status:| No \n Check eduniversal-ranking.com SSL connection:| (Grade: F) \n \n ##### Coordinated Disclosure Timeline:\n \n Description| Value \n ---|--- \n Vulnerability submitted via Open Bug Bounty| 19 December, 2016 00:14 GMT \n Generic security notifications sent to website owner| 19 December, 2016 00:17 GMT \n Notification sent to subscribers (without technical details)| 19 December, 2016 02:17 GMT \n Vulnerability details disclosed by researcher| 26 December, 2016 01:13 GMT \n Vulnerability patched by the website owner| 25 November, 2017 09:37 GMT\n", "href": "https://www.openbugbounty.org/reports/198624/", "id": "OBB:198624", "lastseen": "2017-11-26T22:21:09", "openbugbounty": {"patchStatus": "patched", "mirror": ""}, "published": "2016-12-19T00:14:00"}