Lucene search

K
openbugbountyIwoodythecowboyOBB:214755
HistoryFeb 21, 2017 - 9:15 p.m.

minfind.com XSS vulnerability

2017-02-2121:15:00
iwoodythecowboy
www.openbugbounty.org
7
Vulnerable URL:
https://www.minfind.com/search.php?qs=%22%3E%3C%2Ftitle%3E%27%3E%3B%3C%2Fscript%3E%3Csvg%2Fonload%3Dalert%28%2FOPENBUGBOUNTY%2F%29%3E
Details:
Description Value
Patched: Yes, at 28.07.2017
Latest check for patch: 28.07.2017 15:30 GMT
Vulnerability type: XSS
Vulnerability status: Publicly disclosed
Alexa Rank 1193310
VIP website status: No
Check minfind.com SSL connection: (Grade: A-)
Coordinated Disclosure Timeline:
Description Value
Vulnerability submitted via Open Bug Bounty 21 February, 2017 21:15 GMT
Generic security notifications sent to website owner 21 February, 2017 21:18 GMT
Notification sent to subscribers (without technical details) 21 February, 2017 22:17 GMT
Vulnerability details disclosed by researcher 14 March, 2017 22:14 GMT
Vulnerability patched by the website owner 28 July, 2017 15:30 GMT