Search...

jakartanotebook.com XSS vulnerability

2017-06-12T18:51:00

ID OBB:247378
Type openbugbounty
Reporter Random_Robbie
Modified 2017-07-25T09:16:00

Description

Vulnerable URL:

https://www.jakartanotebook.com/asus?show=40&sort;=newitem&price;="'--!&gt;

##### Details:

Description| Value  
---|---  
Patched:| No  
Latest check for patch:| 31.07.2017  
Vulnerability type:| XSS  
Vulnerability status:| Publicly disclosed  
Alexa Rank| 24283  
VIP website status:| Yes

##### Coordinated Disclosure Timeline:

Description| Value  
---|---  
Vulnerability submitted via Open Bug Bounty| 12 June, 2017 18:51 GMT  
Vulnerability existence verified and confirmed| 13 June, 2017 09:01 GMT  
Generic security notifications sent to website owner| 13 June, 2017 09:01 GMT  
Notification sent to subscribers (without technical details)| 13 June, 2017 10:17 GMT  
Vulnerability details disclosed by researcher| 25 July, 2017 09:16 GMT

JSON Vulners Source

Initial Source

{"type": "openbugbounty", "lastseen": "2017-10-16T23:02:37", "href": "https://www.openbugbounty.org/reports/247378/", "cvss": {"score": 0.0, "vector": "NONE"}, "reporter": "Random_Robbie", "description": "##### Vulnerable URL:\n \n \n https://www.jakartanotebook.com/asus?show=40&sort;=newitem&price;=\"'--!>\n \n ##### Details:\n \n Description| Value \n ---|--- \n Patched:| No \n Latest check for patch:| 31.07.2017 \n Vulnerability type:| XSS \n Vulnerability status:| Publicly disclosed \n Alexa Rank| 24283 \n VIP website status:| Yes \n \n ##### Coordinated Disclosure Timeline:\n \n Description| Value \n ---|--- \n Vulnerability submitted via Open Bug Bounty| 12 June, 2017 18:51 GMT \n Vulnerability existence verified and confirmed| 13 June, 2017 09:01 GMT \n Generic security notifications sent to website owner| 13 June, 2017 09:01 GMT \n Notification sent to subscribers (without technical details)| 13 June, 2017 10:17 GMT \n Vulnerability details disclosed by researcher| 25 July, 2017 09:16 GMT\n", "bulletinFamily": "bugbounty", "references": [], "viewCount": 1, "cvelist": [], "openbugbounty": {"mirror": "", "patchStatus": "unpatched"}, "enchantments_done": [], "title": "jakartanotebook.com XSS vulnerability ", "id": "OBB:247378", "modified": "2017-07-25T09:16:00", "published": "2017-06-12T18:51:00", "enchantments": {"score": {"value": 0.0, "vector": "NONE", "modified": "2017-10-16T23:02:37", "rev": 2}, "dependencies": {"references": [], "modified": "2017-10-16T23:02:37", "rev": 2}, "vulnersScore": 0.0}}