iyfipgun.com XSS vulnerability

2017-09-2421:31:00

OmniGooch

www.openbugbounty.org

JSON

Vulnerable URL:

http://www.iyfipgun.com/ASP_Programmer.cfm?domain=programmerworld.net&fp;=KkkKpnNaKkCBnUcZds9quhym2bJ%2FL0HYFcZWb82J9XwEVVg0DGEBtiuSgnVfTY8vTM2HK5QOCbkcMJ%2FrNxIKmZGNZYm91DFrf7h2P0o9%2FfSn239n57KsNO%2BSd8LXXFUFRJiDxN89Zcs4XkPjJ%2Fxx%2Fimn7RWGnePqoyPNaaZbCMpOVpaEAcmMJcrodD9%2Bw1lr%2BhyaFlkjqXDkbXe5Xs8SFg%3D%3D&maxads;=0&kld;=1003&prvtof;=0s20GEMWyscHiO2kU39KPltNIp51A3hjNloyrI7CY%2F0GMwhAvfK6sAmhyjWU9XDtgz1LBller1gBrjjLkM3EMsZdk35tK2aDWA4gLVILSvTEtaGOY93%2BADEz%2F4ROMFwOoxx3qp9Sz%2F33trDv3iHlaQ%3D%3D&&&kt;=217&&kbc;=programmer&ki;=2373197&ktd;=0&kld;=1003&kp;=4&bd;=-7%23900%231440%231%230%23661%23338

Details:

Description	Value
Patched:	Yes, at
Vulnerability type:	XSS
Vulnerability status:	Publicly disclosed
Alexa Rank	188512
VIP website status:	No

Coordinated Disclosure Timeline:

Description	Value
Vulnerability submitted via Open Bug Bounty	24 September, 2017 21:31 GMT
Generic security notifications sent to website owner	24 September, 2017 21:34 GMT
Notification sent to subscribers (without technical details)	24 September, 2017 22:17 GMT
Vulnerability details disclosed by researcher	26 October, 2017 18:19 GMT
Vulnerability patched by the website owner	27 October, 2017 11:37 GMT

JSON