Lucene search

K
openbugbountyRandom_RobbieOBB:234004
HistoryMay 09, 2017 - 8:43 a.m.

law.georgetown.edu XSS vulnerability

2017-05-0908:43:00
Random_Robbie
www.openbugbounty.org
9
Vulnerable URL:
http://www.law.georgetown.edu/search.cfm?q="--!>"&site;=Law_Center_Website&lr;=&ie;=UTF-8&oe;=UTF-8&output;=xml_no_dtd&client;=lawcenter_frontend&access;=p&sort;=date%3AD%3AL%3Ad1&start;=460&sa;=N&filter;=0
Details:
Description Value
Patched: Yes, at 10.05.2017
Latest check for patch: 10.05.2017 18:28 GMT
Vulnerability type: XSS
Vulnerability status: Publicly disclosed
Alexa Rank Unknown / Not calculated
VIP website status: No
Check law.georgetown.edu SSL connection: (Grade: B-)
Coordinated Disclosure Timeline:
Description Value
Vulnerability submitted via Open Bug Bounty 9 May, 2017 08:43 GMT
Generic security notifications sent to website owner 9 May, 2017 08:45 GMT
Notification sent to subscribers (without technical details) 9 May, 2017 10:17 GMT
Vulnerability details disclosed by researcher 20 June, 2017 09:15 GMT
Vulnerability patched by the website owner 21 June, 2017 01:36 GMT