Lucene search

K
openbugbountyMiguelSantarenoOBB:277998
HistoryAug 11, 2017 - 4:43 a.m.

jsscar.standvirtual.com XSS vulnerability

2017-08-1104:43:00
MiguelSantareno
www.openbugbounty.org
7
Vulnerable URL:
https://jsscar.standvirtual.com/?q=%27%22%3E%3Csvg%2Fonload%3Dconfirm%28%2FOPENBUGBOUNTY%2F%29%3E&search;%5Bcategory_id%5D=&search;%5Border%5D=created_at%3Adesc&search;%5Bstand_id%5D=6118
Details:
Description Value
Patched: Yes, at
Vulnerability type: XSS
Vulnerability status: Publicly disclosed
Alexa Rank Unknown / Not calculated
VIP website status: No
Check jsscar.standvirtual.com SSL connection: (Grade: A)
Coordinated Disclosure Timeline:
Description Value
Vulnerability submitted via Open Bug Bounty 11 August, 2017 04:43 GMT
Generic security notifications sent to website owner 11 August, 2017 04:45 GMT
Notification sent to subscribers (without technical details) 11 August, 2017 06:17 GMT
Vulnerability details disclosed by researcher 30 September, 2017 14:22 GMT
Vulnerability patched by the website owner 2 October, 2017 06:53 GMT