Description
##### Vulnerable URL:
http://autos.unionleader.com/places/search/type:2/max_price:0/max_miles:0/make:Nissan/model:Altima/services:0/dealer:0/city:Derry/year:0/body_style:0%22%27%2D%2D%21>
##### Details:
Description| Value
---|---
Patched:| No
Latest check for patch:| 04.08.2017
Vulnerability type:| XSS
Vulnerability status:| Publicly disclosed
Alexa Rank| Unknown / Not calculated
VIP website status:| Yes
Check autos.unionleader.com SSL connection:| (Grade: C+)
##### Coordinated Disclosure Timeline:
Description| Value
---|---
Vulnerability submitted via Open Bug Bounty| 22 June, 2017 15:15 GMT
Vulnerability existence verified and confirmed| 23 June, 2017 08:15 GMT
Generic security notifications sent to website owner| 23 June, 2017 08:15 GMT
Notification sent to subscribers (without technical details)| 23 June, 2017 10:17 GMT
Vulnerability details disclosed by researcher| 4 August, 2017 08:16 GMT
{"type": "openbugbounty", "viewCount": 3, "enchantments": {"score": {"value": 0.0, "vector": "NONE"}, "dependencies": {}, "backreferences": {}, "exploitation": null, "vulnersScore": 0.0}, "reporter": "Random_Robbie", "title": "autos.unionleader.com XSS vulnerability ", "cvelist": [], "bulletinFamily": "bugbounty", "cvss": {"score": 0.0, "vector": "NONE"}, "references": [], "enchantments_done": [], "modified": "2017-08-04T08:16:00", "description": "##### Vulnerable URL:\n \n \n http://autos.unionleader.com/places/search/type:2/max_price:0/max_miles:0/make:Nissan/model:Altima/services:0/dealer:0/city:Derry/year:0/body_style:0%22%27%2D%2D%21>\n \n ##### Details:\n \n Description| Value \n ---|--- \n Patched:| No \n Latest check for patch:| 04.08.2017 \n Vulnerability type:| XSS \n Vulnerability status:| Publicly disclosed \n Alexa Rank| Unknown / Not calculated \n VIP website status:| Yes \n Check autos.unionleader.com SSL connection:| (Grade: C+) \n \n ##### Coordinated Disclosure Timeline:\n \n Description| Value \n ---|--- \n Vulnerability submitted via Open Bug Bounty| 22 June, 2017 15:15 GMT \n Vulnerability existence verified and confirmed| 23 June, 2017 08:15 GMT \n Generic security notifications sent to website owner| 23 June, 2017 08:15 GMT \n Notification sent to subscribers (without technical details)| 23 June, 2017 10:17 GMT \n Vulnerability details disclosed by researcher| 4 August, 2017 08:16 GMT\n", "href": "https://www.openbugbounty.org/reports/251557/", "id": "OBB:251557", "lastseen": "2017-10-16T22:46:04", "openbugbounty": {"patchStatus": "unpatched", "mirror": ""}, "published": "2017-06-22T15:15:00", "immutableFields": [], "cvss2": {}, "cvss3": {}, "_state": {"dependencies": 1645465235, "score": 1659778619}}
{}
autos.unionleader.com XSS vulnerability