Lucene search

K
openbugbountyNeoOBB:204360
HistoryJan 08, 2017 - 5:02 a.m.

grameenphone.com XSS vulnerability

2017-01-0805:02:00
Neo
www.openbugbounty.org
8
Vulnerable URL:
https://www.grameenphone.com/bn/search/node/%22%3E%3Cscript%3Ealert('OPENBUGBOUNTY')%3C/script%3E
Details:
Description Value
Patched: No
Latest check for patch: 28.07.2017
Vulnerability type: XSS
Vulnerability status: Publicly disclosed
Alexa Rank 6524
VIP website status: Yes
Check grameenphone.com SSL connection: (Grade: C)
Coordinated Disclosure Timeline:
Description Value
Vulnerability submitted via Open Bug Bounty 8 January, 2017 05:02 GMT
Generic security notifications sent to website owner 8 January, 2017 05:05 GMT
Notification sent to subscribers (without technical details) 8 January, 2017 06:17 GMT
Vulnerability details disclosed by researcher 15 January, 2017 05:13 GMT