it.geog.ucsb.edu XSS vulnerability

2017-08-05T12:27:00
ID OBB:276009
Type openbugbounty
Reporter qiece
Modified 2017-09-16T06:48:00

Description

Vulnerable URL:
http://it.geog.ucsb.edu/file.php?key=_j1tdv4t6t8j9eswlvnxfgsa9uxkjirm&expires;=1502064000&signature;=c588bf05640406a23a55b14ea666c31ddc4c854e
Details:

Description| Value
---|---
Patched:| Yes, at
Vulnerability type:| XSS
Vulnerability status:| Publicly disclosed
Alexa Rank| Unknown / Not calculated
VIP website status:| No
Check it.geog.ucsb.edu SSL connection:| (Grade: F)

Coordinated Disclosure Timeline:

Description| Value
---|---
Vulnerability submitted via Open Bug Bounty| 5 August, 2017 12:27 GMT
Generic security notifications sent to website owner| 7 August, 2017 15:18 GMT
Vulnerability details disclosed by researcher| 15 September, 2017 14:34 GMT
Vulnerability patched by the website owner| 16 September, 2017 06:48 GMT